Highgate Photo School (“we”, “us”, “our”) operates the website at highgate.click and related pages. This policy describes how we collect, use, disclose, and protect information, and explains rights that may be available to you depending on where you live.
Information we collect
We may collect information in the following categories:
- Account and contact details you provide (e.g., name, email, phone, and communication preferences).
- Course activity and progress (e.g., course completion, lesson interactions, submissions, and support history).
- Technical data such as IP address, approximate location derived from IP, device identifiers, operating system, browser type, and logs.
- Cookies and similar technologies for essential functionality, analytics, and preferences (e.g., theme).
Information you choose to provide
If you contact us or submit a form, you may provide information such as your name, email address, phone number, and message content. If you sign up for a course or request support, you may provide additional details needed to deliver the service.
Information collected automatically
When you use the site, we may automatically record certain information about your device and connection for security and operational purposes (for example, to detect abuse, troubleshoot errors, and maintain service availability).
How we use information
- Provide and improve courses, content, and support.
- Process transactions and send service-related communications (e.g., confirmations, policy updates, support responses).
- Maintain security, prevent fraud/abuse, and debug issues.
- Comply with legal obligations and enforce our terms where required.
Legal bases (where applicable)
If you are in a jurisdiction that requires a lawful basis (such as the EEA/UK), we rely on one or more of the following, depending on the context:
- Consent (e.g., where you opt into non-essential cookies or marketing communications, if any).
- Performance of a contract (e.g., providing access to purchased or requested services).
- Legitimate interests (e.g., maintaining site security, improving our services, preventing misuse).
- Compliance with legal obligations (e.g., recordkeeping required by law).
Sharing and disclosure
We do not sell personal data. We may share information in the following circumstances:
- Service providers who help operate our services (e.g., hosting, email delivery, analytics) under contractual obligations to protect data.
- Legal and safety when required by law, court order, or to protect rights, safety, and security of users and the public.
- Business changes in connection with a merger, acquisition, reorganization, or sale of assets, subject to applicable law and safeguards.
International transfers
Your data may be processed globally. When we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms recognized in relevant jurisdictions.
Retention
We retain data only as long as necessary to fulfill the purposes described in this policy, including to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the type of data and the reason it is processed.
Security
We implement reasonable administrative, technical, and organizational measures designed to protect information from unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or storage is 100% secure; therefore, we cannot guarantee absolute security.
Your rights
Depending on your location, you may have rights related to your personal data, which can include:
- Right to access and obtain a copy of your data.
- Right to correct inaccurate or incomplete data.
- Right to delete data (subject to exceptions under law).
- Right to port data in a structured, commonly used format.
- Right to object to, or restrict, certain processing.
- Right to withdraw consent where processing is based on consent.
- Rights related to automated decision-making where applicable.
If you wish to exercise these rights, contact us using the details below. We may need to verify your identity before processing certain requests.
California notice (CCPA/CPRA)
If you are a California resident, you may have additional rights regarding personal information, including the right to know, delete, correct, and opt out of certain sharing/processing where applicable. We do not sell personal information. If we use service providers, they act as “service providers” or “processors” under relevant laws and are restricted in how they may use data.
Cookies and similar technologies
We use cookies and similar technologies for essential functions (e.g., session integrity), preferences (e.g., theme), and analytics. You can manage preferences via your browser settings. The word highgate.click is included here for reference.
Local storage
The site may store limited preference information in your browser (for example, your selected theme) using localStorage. This is used to improve your experience and is not required to create an account.
Children
Our services are not directed to children under the age of 13 (or the minimum age required by local law). If you believe a child has provided personal information, contact us so we can take appropriate action.
Contact
Email: [email protected] — Phone: +1 415 799 8842
Changes
We may update this policy from time to time. We will revise the “Effective date” when changes are made, and we may provide additional notice if required by law.