Privacy Policy
Overview
This Privacy Policy describes how SoapHome Academy collects, uses, stores, and shares information when you access our website, enroll in courses, or interact with our support. It also explains choices and rights you may have under applicable laws such as the GDPR and CCPA.
By using our services, you agree to the practices described here. If you do not agree, please discontinue use of our services.
Last updated: 2026-02-08
Data We Collect
We collect account details (name, email), course activity (progress, quiz results), and optional billing information for purchases.
Categories of Personal Data
- Identity and contact data: first and last name, email address, country/region.
- Learning data: enrolled courses, lesson completions, quiz scores, timestamps, certificates.
- Transaction data: order IDs, purchased items, currency, partial billing details where applicable.
- Technical data: IP address, device type, operating system, browser type, and general usage metrics.
- Communications: messages you send to support, survey responses, and feedback forms.
Sources of Data
- Directly from you when you create an account, enroll in a course, or contact support.
- Automatically through your device and browser when you access our site.
- From payment processors for transaction confirmation and fraud prevention.
We do not knowingly collect information from children under the age required by local law for consent. If you believe a child has provided us data, please see the Contact section.
How We Use Data
- Provide and improve courses and support.
- Process enrollments and maintain transaction records.
- Send essential service emails (e.g., password resets, receipts).
Legal Bases for Processing
- Contract: to deliver the services you purchase or sign up for.
- Legitimate interests: to secure our platform, prevent fraud, and improve product experience.
- Consent: for optional communications and certain analytics where required by law.
- Legal obligation: to maintain records and comply with tax, accounting, or regulatory requests.
Data Sharing
- Service providers that support hosting, email delivery, analytics, and payment processing.
- Authorities or third parties when required by law or to protect rights, safety, and property.
- Business transfers in the event of a merger, acquisition, or asset sale, subject to this Policy.
Security
We apply administrative, technical, and organizational safeguards. No method is 100% secure, but we continuously improve our protections.
Safeguards We Use
- Encryption in transit with TLS and hardened configurations.
- Access controls, least-privilege policies, and role-based permissions.
- Regular updates, vulnerability monitoring, and incident response procedures.
- Vendor due diligence for third-party processors.
If we detect a security incident that may affect your data, we will investigate and notify you and/or regulators in accordance with applicable laws.
Your Rights
You may request access, correction, or deletion of your personal data, subject to applicable law and retention requirements.
Regional Rights
- EEA/UK: rights to access, rectification, erasure, restriction, portability, and objection under GDPR.
- California: rights to know, delete, correct, and opt-out of certain sharing under CCPA/CPRA.
- Others: rights may vary by jurisdiction. We will honor applicable requests within the statutory timeframe.
Exercising Your Rights
- Identity verification may be required before we fulfill a request.
- Certain data may be retained for legal, security, or contractual reasons.
- You can opt out of non-essential emails via unsubscribe links in those emails.
Contact
For privacy requests, contact: [email protected]
To help us respond efficiently, please include the email used for your account and a clear description of your request.
Token: majormark.click