Privacy policy

Apron2Amp is a trade name of PANBUDDHA DIGITAL SOLUTIONS LIMITED, a company incorporated in British Columbia, Canada (incorporation no. BC1585293).

The company is responsible for personal information collected through this website. Our privacy officer is at hello@apron2amp.com, or by mail at 329 Howe St, Unit #203, Vancouver, BC V6C 3N2, Canada. Order questions go to support@apron2amp.com.

Your account: your email address, your name if you give one, a scrambled (hashed) copy of your password if you set one, and the 6-digit sign-in codes we email you, kept scrambled and only for the ten minutes they work. Each time you sign in we record the IP address and browser of that device, so you can sign out every other device from your account page; a session lasts 60 days.

Purchases: what you bought, the price, the currency, the date, and Stripe’s customer and payment references for the order. At checkout Stripe asks for your billing address, which we use only to check that we sell where you live, and records the country your card is registered in. We also record that you accepted the terms at checkout: which version, when, and the IP address and browser you accepted from. Payments are handled by Stripe, our payment processor. We never see or keep your full card number.

Course progress: which sessions you’ve marked as done, the milestones you’ve reached, and, if you ask for a certificate, the name you type on it and its serial number.

Listening Night: the title and link of a track you submit, any note you add, and when you gave your consent for it to be played.

Newsletter: your email address and a record of when and how you agreed to receive it, when you confirmed, and when you unsubscribed.

Messages: anything you write to us through the contact page or by email, kept with our correspondence.

Server records: our host keeps standard records of each request, such as IP address, browser type, the page requested and the time. We also count requests per IP address for a short while to slow down automated abuse. These exist so the site can run and stay secure.

Cookies: a session cookie while you’re signed in (60 days), and a small cookie that remembers “USD” or “CAD” for a year if you switch currency. Cloudflare’s bot check on our forms may set a cookie of its own. There are no advertising trackers, no third-party analytics, and no cookies used to follow you around.

To open your account and sign you in, take your order and give you what you bought, keep your place in the course, run Listening Night, answer you, handle refunds and disputes, send the newsletter if you’ve said yes, keep the site secure, and keep the records the law requires.

If our network provider tells us which country (and, in Canada, which province) your connection comes from, we use it to show prices in Canadian dollars to visitors in Canada, and to show “Not available in the UK/EU yet” or “Not available in Quebec yet” instead of a checkout to visitors in the United Kingdom, the European Union or Quebec. We don’t store it.

Railway hosts this website and the database behind it. It acts as our service provider on our instructions. Its own server records are kept for a short period under its retention policy.

Stripe processes payments and keeps the card details we never see, under its own privacy policy for the part it runs.

Brevo sends our email: sign-in codes, receipts, the newsletter and the rest.

Cloudflare runs our domain and the bot check on our forms, and stores the course files you download (Cloudflare R2).

The lesson videos play from YouTube, embedded in privacy-enhanced mode (youtube-nocookie.com). When you play one, Google receives the request and its privacy policy applies.

These providers may store or process information outside Canada, including in the United States, where it can be accessed by that country’s courts and authorities under its laws. We may also disclose information where the law requires it.

We never sell your information.

Your account, progress and submissions: until you delete your account, from your account page or by email. Deleting it ends your access to the course and removes your progress, your certificate and your Listening Night submissions, together with the record of the terms you accepted at checkout.

Orders and receipts: seven years, as tax law requires. They are kept with the email address you bought with, even after your account is deleted.

Newsletter consent: for as long as you’re subscribed, plus a record of your consent and of your unsubscribe for as long as the law expects us to be able to show them.

Server records: a short period under our host’s retention policy. Sign-in sessions: 60 days, or until you sign them out.

We only send it if you’ve agreed to receive it, and only after you’ve clicked the confirmation link we email you. Creating an account or taking the free lessons doesn’t sign you up for it on its own.

Every newsletter email has an unsubscribe link. We act on it right away, and always within the 10 business days Canada’s anti-spam law (CASL) allows. We keep a record of your consent and of your unsubscribe.

You can ask what we hold about you, ask us to correct or delete it, and withdraw your consent. Your name, newsletter choice and account deletion are in your account page; for anything else, email hello@apron2amp.com and we’ll reply within 30 days.

If you’re not satisfied, you can complain to the Office of the Privacy Commissioner of Canada. If you live in Quebec, you can also complain to the Commission d’accès à l’information du Québec.

If you live in a US state with its own privacy law, you can make the same requests, including asking us not to share your information for advertising. We don’t share it for advertising.

This website isn’t for children under 13, and we don’t knowingly collect their information. If you think a child has given us some, email us and we’ll delete it.

If this policy changes, the date at the top changes with it. Write to hello@apron2amp.com.