Privacy Policy

1. What we collect

Information you give us

• Email address and name — when you request the free lessons, subscribe to the newsletter, or create an account.
• Account details — handled by Clerk. We store an identifier and your email; Clerk holds the credentials.
• Billing information — handled by Stripe. We receive a customer reference, subscription status, and the last four digits and card brand. We never receive or store full card numbers.
• Messages — anything you type into the contact form, which is emailed to us.

Information collected automatically

• Usage data — pages visited, referring page, approximate location from your IP address, device and browser type.
• Listening and progress data — which lessons you play, how far through you are, and which ones you favourite, so playback resumes where you left off.
• Cookies and similar technologies — see section 4.

2. Why we use it

• To give you the lessons and the account you signed up for (performance of a contract).
• To take payment and manage your subscription (performance of a contract).
• To send the newsletter and occasional offers (consent — withdraw it any time via the unsubscribe link).
• To answer messages you send us (legitimate interest).
• To understand which pages and lessons work, and to measure advertising (legitimate interest, or consent where required).
• To keep the site secure and to meet our legal and tax obligations.

We do not sell personal information, and we do not share it for cross-context behavioural advertising beyond the advertising measurement described below.

3. Who else touches your data

We use the following service providers. Each one only receives what it needs to do its job, and each is bound to protect it.

We may also disclose information where the law requires it, to enforce our Terms, or as part of a sale or transfer of the business — in which case you would be told before your data moved.

4. Cookies and tracking

We use three kinds of cookie and similar storage:

• Essential — sign-in sessions and security. The site cannot work without these.
• Analytics — which pages get read and which do not.
• Advertising — the Meta Pixel, when configured, so we can tell which ads bring riders in.

You can clear or block cookies in your browser settings; blocking essential ones will break sign-in. Most browsers also offer a “Do Not Track” setting, and we honour Global Privacy Control signals where we receive them.

5. Email

If you give us your email for the free lessons, we send the lessons and add you to the newsletter. Every email has a one-click unsubscribe at the bottom, and unsubscribing takes effect immediately. Transactional email — receipts, password resets, subscription notices — continues regardless, because it is part of the service you bought.

6. How long we keep it

• Account and subscription records — while your account is open, then up to 7 years for tax and accounting records.
• Newsletter subscribers — until you unsubscribe, plus a suppression record so we do not email you again by mistake.
• Analytics — typically 14 months, per each provider’s defaults.
• Contact form messages — kept in our email for as long as the conversation is useful.

7. Your rights

Wherever you live, you can ask us to:

• tell you what personal data we hold about you, and give you a copy;
• correct anything that is wrong;
• delete your data (subject to records we must keep for tax or legal reasons);
• stop using it for marketing;
• export it in a portable format.

Email hello@samanthabaer.com and we will respond within 30 days. We will not treat you differently for exercising any of these rights.

If you are in the UK or EEA, the lawful bases we rely on are listed in section 2, and you have the right to complain to your local data protection authority. If you are in California, the categories above are the categories we collect, use, and disclose to service providers; we do not sell or share personal information as those terms are defined by the CCPA.

8. Where your data is processed

We operate from the United States, and our providers process data in the United States and other countries. Where data moves out of the UK or EEA, our providers rely on Standard Contractual Clauses or an equivalent safeguard.

9. Security

The site is served over HTTPS, payment data never reaches our servers, and access to the database is restricted. No system is perfectly secure, so we cannot guarantee absolute security — but if a breach ever affects your data, we will tell you and the relevant authority as the law requires.

10. Children

The site is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us information, email us and we will delete it.

11. Changes to this policy

We will update this page when our practices change, and the effective date at the top always reflects the current version. Material changes are announced by email to subscribers.

12. Contact

Privacy questions, or a request about your data: