Privacy Policy

This policy explains what personal information Silverline Equipment collects, why we collect it, how long we keep it, who else can see it, and what you can ask us to do with it. We are a small training studio, and our data practices are correspondingly small: we collect what enrollment and teaching require, and nothing we cannot justify.

01 Who is responsible

Silverline Equipment is the controller of the personal information described here. Our studio address is 250 W Main St, Lexington, KY 40507. Questions about this policy, or requests about your own data, should go to our records mailbox listed at the end of this page.

02 What we collect

Information you give us

• Enrollment details — your name, email address, phone number, the program you selected, and the description of your work that you write in the form.
• Correspondence — the content of emails and messages you send us, and our replies.
• Billing details — the information needed to issue and reconcile an invoice, such as a billing name and, for organizational bookings, a company name and purchase reference.
• Session material — drafts, outlines and exercises you choose to bring to a session.
• Access needs — anything you tell us so we can run a session you can take part in comfortably.

Information collected automatically

• Technical data — IP address, browser type and version, device type, operating system, screen size, referring page and the pages you viewed on this site.
• Usage data — timestamps, session duration, and which sections of the page were reached.
• Cookie data — the identifiers described in our Cookie Policy, including the preference that remembers whether you chose the inverted page theme.

What we do not collect

We do not collect card numbers or bank credentials through this website. Where a payment is processed, it is handled by a payment provider and we receive only a confirmation and a reference. We do not ask for government identification, we do not collect health data, and we do not run profiling that produces automated decisions about you.

We do not sell personal information, we do not rent contact lists, and we do not share enrollment details with advertisers.

03 Why we use it

• To answer enrollment requests — to reply with dates, group size, fees and preparation notes.
• To run programs — to keep an attendance list, to prepare feedback, to send session materials.
• To take payment — to issue invoices and reconcile them.
• To improve teaching — to see which exercises work, in aggregate, and to revise a program before the next group.
• To keep records — to meet accounting and tax obligations and to resolve disputes.
• To keep the site working — to diagnose faults and to protect against abuse.

Our legal bases, where a framework such as the GDPR applies, are: performance of a contract for enrollment and teaching; our legitimate interests in running and improving a small studio safely; compliance with legal obligations for financial records; and consent, for non-essential cookies and for any optional message you ask to receive.

04 Who we share it with

We share personal information only with service providers who help us operate, and only to the extent they need it. Those categories are: our ecommerce and website hosting platform; our email provider; our payment processor; our accountant; and, if a session runs remotely, the video conferencing provider we name to you in advance.

Each provider is bound to process the data on our instructions and to keep it confidential. We do not authorize any of them to use enrollment details for their own marketing.

We may also disclose information where the law requires it, where we must protect the safety of a participant, or where a business reorganization transfers the studio's records. If a transfer of that kind ever happens, this policy travels with the data.

05 International transfers

Our providers are based mainly in the United States. If you write to us from outside the United States, your information will be transferred to and stored in the United States. Where a transfer is subject to European or United Kingdom rules, we rely on the standard contractual clauses offered by our providers and on the additional safeguards those clauses require.

06 How long we keep it

• Enrollment requests that do not become bookings — twelve months, then deleted.
• Participant records for completed programs — three years, so we can answer questions about what was taught.
• Invoices and financial records — seven years, as accounting rules require.
• Session material you brought — deleted within sixty days of the program ending unless you ask us to keep it for follow-up feedback.
• Website technical logs — up to twelve months in aggregated form.

07 How we protect it

Access to enrollment records is limited to the people who need it to teach or to invoice. Accounts that hold personal data require multi-factor authentication. Devices used for studio work are encrypted. We review who has access at least twice a year and remove access that is no longer needed.

No system is perfectly secure. If a breach affects your personal information and creates a real risk to you, we will tell you and the relevant authority without undue delay, describe what happened, and say what we are doing about it.

08 Your rights

Depending on where you live, you may have the right to: ask what we hold about you and get a copy; correct information that is wrong; ask us to delete information we no longer need; object to or restrict a particular use; withdraw a consent you gave; receive your data in a portable format; and be free from discrimination for exercising any of these rights.

Write to our records mailbox and tell us what you want. We reply within thirty days, or tell you why we need longer. We may ask a question to confirm you are the person the data is about, but we will not ask for more information than that confirmation requires.

California residents

We do not sell or share personal information as those terms are used in California privacy law, and we have not done so in the past twelve months. California residents may exercise the access, deletion and correction rights described above by writing to us, and may use an authorized agent to do so.

European and United Kingdom residents

You may lodge a complaint with your national supervisory authority. We would rather hear from you first, so please write to us and give us a chance to put it right.

09 Children

Our programs are for adults and we do not knowingly collect personal information from anyone under eighteen. If you believe a minor has submitted information through this site, write to our records mailbox and we will delete it.

10 Confidentiality inside a program

Participants share unpublished work with each other in our sessions. We ask every participant to treat that work as confidential, and we do not circulate it outside the group. We do not publish participant writing, quote it in marketing, or share it with other groups without asking first.

11 Cookies

This website uses a small number of cookies and similar technologies. Which ones, what they do and how to refuse them are set out in the Cookie Policy. Essential cookies keep the site working; anything beyond that runs only if you allow it.

12 Changes to this policy

We will update this policy when our practices change or when a new provider joins the list in section four. The version on this page is the current one and carries an effective date. If a change materially affects how we use information we already hold, we will write to the people affected before it takes effect.

13 How to reach us

Privacy requests reach us fastest through the records mailbox below. Program questions are better sent to the mailbox that matches the program, because those are read by the person who teaches it.