This website (https://mariuselena.com) sells access to online bachata dance courses
What data we collect and why
Account and course access (MemberPress)
When you purchase a course or create an account, we collect and store:
- Your name and email address
- A password (stored in encrypted form — we cannot see it)
- Your billing address and country (required for invoicing and tax purposes)
- The courses, memberships, and subscriptions linked to your account
- Your course activity: lessons viewed, progress, completion status, and login history
Legal basis: performance of a contract (delivering the course you purchased) and our legal obligation to keep accurate billing records.
Payments (PayPal)
We use PayPal to process all payments. When you buy a course, you are redirected to PayPal to complete the transaction. PayPal collects and processes your payment information directly — we never see or store your card or bank details.
PayPal shares back with us only what we need to fulfill your order: transaction ID, amount, currency, payment status, and the billing details you used.
PayPal acts as an independent data controller for the data you give them. Their privacy policy is available at https://www.paypal.com/privacy.
Legal basis: performance of a contract.
Invoices and accounting
We are legally required to issue invoices for purchases and to retain them for 10 years under Romanian accounting law (Legea contabilității nr. 82/1991). This means that even if you delete your account, we must keep invoice records (which include your name, address, and purchase details) for that period.
Legal basis: legal obligation.
Comments
If you leave a comment on the site, we collect the data shown in the comment form, plus your IP address and browser user agent to help with spam detection. An anonymized hash of your email address may be sent to Gravatar (https://automattic.com/privacy/) to display a profile picture next to your comment.
Legal basis: consent (you choose whether to comment).
Contact and support
If you email us or contact us through the site, we keep your messages and our replies so we can follow up and improve support.
Legal basis: legitimate interest in providing customer service.
Cookies
We use a small number of cookies, all functional:
- Login cookies keep you signed in. They last two days, or two weeks if you tick “Remember Me.” They are removed when you log out.
- Comment cookies (optional) save your name and email so you don’t have to retype them next time. They last one year.
- A temporary cookie is set when you visit the login page to check whether your browser accepts cookies. It is discarded when you close the browser.
We do not currently use analytics, advertising, or tracking cookies.
Embedded content from other websites
Course pages and articles may include embedded content such as videos. Embedded content behaves as if you had visited the source website directly — those sites may set their own cookies and track your interaction with the content, especially if you are logged in to them.
Who we share your data with
We share your data only with the providers needed to run the site:
- PayPal — payment processing (see above)
- Our web hosting provider — stores all site data on their servers
- Gravatar (only if you leave a comment) — profile picture display
- Automated spam detection — comment submissions may be checked for spam
If you request a password reset, your IP address will be included in the reset email.
We do not sell your data and do not share it for marketing purposes.
International data transfers
Some of our providers (notably PayPal) may process data outside the European Economic Area, including in the United States. When this happens, those transfers are protected by the safeguards required under GDPR — typically Standard Contractual Clauses or, where applicable, an adequacy decision by the European Commission.
How long we keep your data
- Account data: for as long as your account is active, plus a reasonable period afterward in case you return. You can request deletion at any time.
- Invoices and accounting records: 10 years (legal requirement, see above).
- Comments: retained indefinitely so we can recognize follow-up comments automatically.
- Support emails: typically up to 3 years after the last interaction.
Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Delete your data (except where we are legally required to keep it, such as invoices)
- Restrict or object to certain processing
- Receive a copy of your data in a portable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, email us at [mariuselenaofficial@gmail.com]. We will respond within one month.
Changes to this policy
We may update this policy from time to time. The “last updated” date at the top will show when the most recent change was made. For significant changes, we will notify registered users by email.