Privacy & Cookie Policy
International Face Painting School

Last Updated: July 21, 2026

1. Introduction

Welcome to the International Face Painting School (“IFPS”, “School”, “we”, “us”, “our”). This policy explains how we collect, use, share, and protect your personal data when you use our website (https://facepaintingschool.com), mobile apps, and related services.

These services are provided by International Face Painting School EOOD, a company registered in Bulgaria ("IFPS", "we", "us", "our"). If you have any questions about this policy or your data, contact our Data Protection Officer, Igor Murasev, at privacy@facepaintingschool.com.

We are committed to protecting your privacy in accordance with applicable laws, including the European Union's General Data Protection Regulation (GDPR).

By using our services, you confirm you are at least 16 years old or have verifiable parental consent.

2. What Data We Collect

We collect the following personal data:

  • Contact Data: Name, email, phone number, billing/shipping addresses.
  • Account Data: Login credentials and profile information.
  • Usage Data: How you interact with our website, course platforms, and communications.
  • Technical Data: IP addresses, browser type, device info, cookies.
  • Communication Data: Messages you send us via website forms, emails, or social media.
  • Payment Data: Transaction details and payment methods.
  • Marketing Preferences: Your consent and preferences for receiving promotional communications.

We do not collect sensitive personal data such as health info, racial or ethnic origin, religious beliefs, or political opinions.

3. How We Use Your Data

We process your data to:

  • Provide and manage your course access and services.
  • Communicate with you about your account, orders, and updates.
  • Personalize your learning experience and website content.
  • Manage payments, subscriptions, and refunds.
  • Improve our services through analytics.
  • Comply with legal obligations.
  • Send marketing communications if permitted, which you can opt out of anytime.

4. Legal Basis for Processing

Our lawful grounds include your consent, contract performance, legitimate interests (e.g., improving services), and legal compliance.

5. Cookies and Tracking

Our website uses cookies that help improve your experience and enable essential functions:

  • Strictly Necessary Cookies: Required for website operation and payment processing.
  • Performance Cookies: Collect info to analyze and improve site performance.
  • Functional Cookies: Remember your preferences and personalize content.
  • Marketing Cookies: Enable targeted advertising, including third-party platforms like Google Analytics and Facebook Pixel.

You can manage cookies via your browser settings and opt-out tools. Blocking cookies may limit website functionality.

6. Sharing and Transferring Data

We may share your data with:

  • Service providers handling hosting, payment processing, analytics, and marketing.
  • Legal authorities if required by law.
  • Third parties in event of business transfers or mergers.

Our main service providers include Circle (community platform), ThriveCart and Stripe (payment processing), KIT (email communications), and Crisp (customer support). Each of these providers is contractually bound to protect your data in accordance with applicable law.

We ensure adequate safeguards for data transfers outside the European Economic Area (EEA), primarily through Standard Contractual Clauses as adopted by the European Commission.

7. Data Retention

We retain personal data only as long as necessary to fulfil our contractual and legal obligations. Billing and payment information is kept for at least six years for tax purposes. Account and profile data is retained for the duration of your membership or course access, plus a reasonable period afterward to handle support requests or legal claims. Marketing preference data is retained until you unsubscribe or request deletion. Some data may be anonymized for research or statistical use indefinitely.

8. Your Rights

Under GDPR, you have rights including:

  • Access to your personal data.
  • Correction or deletion of inaccurate data.
  • Restriction or objection to certain processing.
  • Data portability.
  • Withdrawal of consent where applicable.

Requests can be made to privacy@facepaintingschool.com. We process requests promptly, typically within one month.

9. Security

We implement technical and organizational measures to protect your data against unauthorized access, loss, or alteration. Access is restricted to authorized employees and partners under confidentiality obligations.

10. Changes to this Policy

We may update this policy to reflect changes in laws or our practices. Significant changes will be communicated appropriately. Continued use of our services constitutes acceptance of updated policies.

11. Contact Us

For privacy questions or concerns, contact Data Protection Officer Igor Murasev at privacy@facepaintingschool.com.

12. External Links

Our website may include external links. We are not responsible for third-party site content or privacy practices. Please review their policies independently.