Privacy Policy

1. Who We Are

Open Space Academy ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information when you use our website and services.

Contact: openspaceacademy@outlook.com

2. Information We Collect

We collect information you provide directly:

• Enquiry Form: Name, email address, phone number (optional), subject, and message
• Download Form: Your email address and the resource requested. Answers in the downloaded reflection worksheet are not sent to us.
• Member accounts: Account details, separate preferences for resource and blog emails, and delivery records. Optional notifications are off until you choose them.
• Blog comments: Your chosen display name and comment, linked to your member account. Approved comments are public; your email address is not displayed.

We automatically collect:

• Technical Data: IP address (for security and rate limiting), browser type, device information
• Cookies: Essential cookies for website functionality (see Cookie Policy below)

3. How We Use Your Information

We use your information to:

• Respond to your enquiries and provide requested services
• Provide resources you have requested. Downloading a worksheet does not subscribe you to marketing.
• Send new-resource or blog updates with your consent. Change each preference in your member area or use the unsubscribe link in an email.
• Protect our website from abuse (rate limiting)
• Improve our website and services

Legal Basis (GDPR): We process your data based on your consent, our legitimate interests, or to fulfil a contract with you.

4. Data Storage and Security

Your data is stored securely using industry-standard encryption and security measures. We use Lovable Cloud infrastructure with row-level security policies to protect your information. We retain your enquiry data for up to 2 years to provide ongoing support and improve our services.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Email Service (Resend): To deliver account emails, enquiry notifications and updates you have opted into
• Hosting Provider: To host and secure our website
• Legal Requirements: If required by law

6. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limited processing of your data
• Portability: Request your data in a portable format
• Objection: Object to processing based on legitimate interests

To exercise these rights, contact us at openspaceacademy@outlook.com. We will respond within 30 days.

7. Cookies

We use only essential cookies required for website functionality:

• Sidebar State: Remembers your navigation preferences
• Cookie Consent: Remembers your cookie preferences

We do not use tracking or advertising cookies. You can manage cookies through your browser settings.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

9. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: openspaceacademy@outlook.com