Privacy Policy

1. INTRODUCTION

This policy explains our data practices under GDPR and Swedish law.

2. DATA CONTROLLER

LessonCraftStudio, Stockholm, Sweden. Contact: privacy@lessoncraftstudio.com

3. DATA COLLECTED

We collect:

• Account data (name, email)
• Usage analytics
• Technical data (IP, browser)
• Cookie preferences

4. LEGAL BASIS

Processing based on:

• Your consent
• Contract performance
• Legal obligations
• Legitimate interests

5. DATA USE

• Service provision
• Account management
• Communications
• Service improvement
• Legal compliance

6. DATA SHARING

Limited sharing with:

• Service providers (processors)
• Payment processors for transactions
• Legal authorities when required
• Third parties with consent

7. DATA RETENTION

Account data: Duration of account plus 1 year. Logs: 90 days. Marketing: Until opt-out.

8. YOUR RIGHTS

GDPR rights include:

• Access your data
• Correct inaccuracies
• Request deletion
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent
• Lodge complaint with IMY

9. SECURITY

Industry-standard security including encryption, access controls, and regular audits.

10. COOKIES

We use:

• Essential cookies (required)
• Functional cookies (preferences)
• Analytics cookies (with consent)

11. CHILDREN

Service for educators/parents. No collection from children under 16.

12. INTERNATIONAL TRANSFERS

Data stored in EU/EEA. External transfers use Standard Contractual Clauses.

13. POLICY CHANGES

Updates notified via email. Continued use constitutes acceptance.

14. CONTACT