Privacy Policy

2. Information We Collect

We collect personal information directly from you, automatically when you use the Services, and from our service providers.

Information you provide. Your name, email address, and password when you create an account. Your billing details when you make a purchase. Any information you include when you contact our support team or respond to quizzes and assessments.

Payment information. Payments are processed by our payment provider, Stripe. We receive limited details: your billing country, postal code, the course you purchased, and your transaction history. We do not receive or store full payment card numbers.

Learning information. When you take a course, we record your enrollments, progress, quiz and assessment responses, scores, and completion status.

Technical and usage information. When you use the Services, we collect your IP address, browser and device type, pages viewed, links clicked, the referring website, and your approximate location derived from your IP address. We collect this through our analytics provider and server logs, without analytics cookies (see Section 8).

We do not intentionally collect sensitive personal information, such as information about your health, racial or ethnic origin, religious beliefs, sexual orientation, or trade union membership. Please do not include such information in support messages or course responses.

3. How We Use Information

We use personal information to:

• create and manage your account, and deliver the courses you purchase;

• process payments;

• provide service emails, such as account confirmations, receipts, and notices about changes to the Services;

• respond to your questions and support requests;

• analyze how the Services are used so that we can improve them;

• prepare aggregated statistics, such as learner and enrollment counts, which cannot identify you;

• detect and prevent fraud, misuse, and security incidents; and

• comply with our legal obligations and enforce our terms.

We do not send marketing emails. We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

Legal bases (EEA and UK).

If you are in the European Economic Area (EEA) or the United Kingdom, we process your personal information on the following legal bases:

4. How We Share Information

We do not sell your personal information, and we do not share it for targeted advertising. We share it only where necessary, and only to the extent needed for the purpose.

With our service providers.

These providers process personal information only on our instructions and are required to protect it.

With Wiley. We share only aggregated or de-identified statistics with Wiley, such as the number of learners and courses purchased. We also let Wiley know which courses are popular. We keep it de-identified from you, do not attempt to re-identify it, and contractually require Wiley to do the same.

With public authorities. We may disclose personal information where required by law, court order, or legal process, or where necessary to protect the rights, property, or safety of our users, Starewater, or others.

In a business transfer. If Starewater is involved in a merger, acquisition, reorganization, or sale of assets, personal information may be transferred to the successor entity, subject to this Privacy Policy.

With your consent. We may share personal information for other purposes where you have given your consent.

5. International Transfers

Starewater is based in the United States, and we and our service providers process personal information in the United States and other countries. Data protection laws there may differ from those where you live.

When we transfer personal information from the EEA, the United Kingdom, or Switzerland, we use appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum and Swiss equivalent where applicable. Where a service provider is certified under the EU-U.S. Data Privacy Framework (or its UK and Swiss extensions), we may also rely on that certification. You may request a copy of these safeguards by contacting us (Section 16).

6. Data Retention

We keep personal information only as long as we need it for the purposes in this Privacy Policy, unless the law requires or permits a longer period. When we no longer need it, we delete or anonymize it.

We may keep information longer where needed to resolve disputes, prevent fraud, or comply with a legal obligation.

7. Data Security

We use appropriate technical and organizational measures to protect personal information against unauthorized access, loss, misuse, or alteration. These include encryption in transit and at rest, access controls, and regular review of our service providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you and the relevant authorities where required by law.

8. Cookies and Analytics

We use only strictly necessary cookies. These keep you signed in, keep the Services secure, and make core features work. The Services cannot function without them.

We do not use advertising cookies, advertising pixels, or session recording. Our analytics provider, PostHog, is configured to work without cookies and to avoid capturing the content of what you type. It records events like how the Services are used, such as pages viewed and links clicked, as described in Section 2.

You can set your browser to block or delete cookies. If you block strictly necessary cookies, you may not be able to sign in or use parts of the Services.

9. Emails We Send

We send service emails about your account and purchases, such as confirmations, receipts, and important notices. You cannot opt out of these while you have an account.

We do not send marketing emails. If we start, we will ask for your consent first.

10. Children

The Services are intended for people aged 18 and over. By creating an account, you confirm that you are at least 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it promptly. If you believe we hold such information, please contact us.

11. Your Rights

Depending on where you live, you may have some or all of these rights:

• to access the personal information we hold about you and get a copy of it;

• to correct inaccurate or incomplete personal information;

• to delete your personal information;

• to restrict or object to certain processing;

• to receive your personal information in a portable format;

• to withdraw consent at any time, without affecting processing carried out before you withdrew it; and

• to lodge a complaint with a data protection authority.

How to make a request.

Email helpdesk@starweaver.com with the subject line "Privacy Request." We may ask you for information to verify your identity before processing a request. We will respond within the time required by law, generally within one month, or within 45 days for requests under U.S. state law. If we decline your request, we will explain why. You may appeal by replying to our response. If we deny your appeal and you are in a U.S. state that provides it, you may contact your state attorney general.

We will not discriminate against you for exercising your privacy rights. You may complain to your local data protection authority at any time, but we encourage you to contact us first so we can try to resolve your concern.

12. Third-Party Websites

The Services link to websites that Starewater does not operate, including dummies.com, other Wiley websites, and Courses. Those websites have their own privacy policies, which this Privacy Policy does not cover. We encourage you to review the privacy policy of each website you visit.

13. Additional Information for U.S. Residents

This section supplements this Privacy Policy for residents of California and other U.S. states with comprehensive privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act.

Categories of personal information.

We collect the categories below from the sources and for the purposes described in Sections 2 and 3. We have not "sold" or "shared" personal information in the past 12 months.

We use sensitive personal information only to provide the Services and keep your account secure, not to infer characteristics about you.

No sale or sharing.

We do not sell personal information or share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 18.

Your rights.

You may exercise the rights to know, access, correct, and delete your personal information, and to appeal our decision, as described in Section 11.

14. Additional Information for Residents of India

This section supplements this Privacy Policy for individuals in India, under the Digital Personal Data Protection Act, 2023 and the rules made under it.

Consent. Where we rely on your consent, we request it through a clear notice that lists the personal data we collect and why. You may withdraw your consent at any time, as easily as you gave it.

Your rights.

You have the right to:

• obtain a summary of your personal data and the processing we carry out;

• have your personal data corrected, completed, updated, or erased;

• nominate another person to exercise your rights if you die or become incapacitated; and

• use your grievance redressal process.

Grievance redressal. If you have a concern about how we process your personal data, email helpdesk@starweaver.com with the subject line "Grievance". We will acknowledge your grievance and respond within the time required by law. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

15. Changes to This Privacy Policy

We review this Privacy Policy periodically. Changes will be posted on this page with a new effective date. If we make a material change, we will notify you by email or by a prominent notice on the Services before the change takes effect.