Privacy Policy

This Privacy Policy explains how Course Miracles collects, uses, protects, and shares your personal information in compliance with the General Data Protection Regulation (GDPR) and Spanish data protection laws.

1. Information We Collect

1.1 Information You Provide

When you enroll in courses, create an account, or contact us, you provide:

• Name and contact information (email address, phone number)
• Billing and payment information
• Educational background and learning goals
• Messages and communications with our team

1.2 Information Collected Automatically

We collect technical information when you use our website:

• IP address and device information
• Browser type and operating system
• Pages visited and time spent on pages
• Referral sources
• Cookies and similar tracking technologies (see Cookie Policy)

1.3 Learning Activity Data

For enrolled students, we track:

• Course progress and completion
• Assignment submissions
• Quiz and assessment results
• Forum posts and community interactions

2. How We Use Your Information

We process your personal data for the following purposes:

2.1 Providing Educational Services

• Processing enrollments and payments
• Delivering course content and materials
• Tracking your learning progress
• Providing support and responding to inquiries
• Issuing certificates of completion

2.2 Improving Our Services

• Analyzing website usage and course effectiveness
• Improving course content and platform functionality
• Developing new courses and features

2.3 Communication

• Sending course-related updates and notifications
• Responding to your questions and requests
• Sending marketing communications (with your consent)

2.4 Legal Compliance

• Complying with legal obligations
• Enforcing our terms and policies
• Protecting against fraud and abuse

3. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on:

• Contract Performance: Processing necessary to provide educational services you've enrolled in
• Legitimate Interests: Improving our services, preventing fraud, and ensuring platform security
• Consent: Marketing communications and non-essential cookies
• Legal Obligation: Compliance with tax laws, accounting requirements, and other legal duties

4. Data Sharing and Disclosure

4.1 Service Providers

We share data with third-party service providers who assist us in:

• Payment processing
• Email communications
• Website hosting and analytics
• Customer support tools

These providers are contractually obligated to protect your data and use it only for specified purposes.

4.2 Legal Requirements

We may disclose your information when required by law, legal process, or to protect our rights and safety or that of others.

4.3 Business Transfers

If Course Miracles is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.4 Anonymized Data

We may share aggregated, anonymized data that cannot identify you personally for research, marketing, or other purposes.

5. Your Rights Under GDPR

As an EU/EEA resident, you have the following rights:

5.1 Right to Access

You can request a copy of the personal data we hold about you.

5.2 Right to Rectification

You can request correction of inaccurate or incomplete data.

5.3 Right to Erasure

You can request deletion of your personal data, subject to certain exceptions (e.g., legal obligations to retain data).

5.4 Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

5.5 Right to Data Portability

You can request your data in a structured, machine-readable format for transfer to another service.

5.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

5.7 Right to Withdraw Consent

Where processing is based on consent, you can withdraw it at any time.

Exercising Your Rights: Contact us at [email protected] to exercise these rights. We will respond within one month of your request.

6. Data Retention

We retain your data for as long as necessary to provide services and comply with legal obligations:

• Active accounts: Retained while your account is active plus a reasonable period after
• Course data: Retained for educational record purposes and legal compliance
• Financial records: Retained per Spanish tax and accounting requirements (typically 6-10 years)
• Marketing data: Retained until you withdraw consent or request deletion

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication
• Employee training on data protection
• Secure backup procedures

However, no internet transmission is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

8. International Data Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• EU Commission adequacy decisions
• Standard Contractual Clauses
• Other legally approved transfer mechanisms

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from minors without parental consent. If you believe we have collected such data, please contact us immediately.

10. Third-Party Links

Our website may contain links to third-party sites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

11. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via email to enrolled students or posted prominently on our website.

12. Complaints and Data Protection Authority

If you believe we have violated your privacy rights, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) or your local supervisory authority.

AEPD Contact:
C/ Jorge Juan, 6
28001 Madrid, Spain
Website: www.aepd.es

13. Contact Us

For questions about this Privacy Policy or to exercise your rights:

Data Controller: Course Miracles
Address: C. Mayor Alta, 1A, 19209 Quer, Guadalajara, Spain
Email: [email protected]
Phone: +34 766 056 098