Privacy Policy

Effective Date: May 7, 2026

1. Introduction

Color Grading Academy ("CGA") is operated by Colour Training Inc.("Colour Training," "we," "us," or "our"). CGA is an online education platform for colorists, accessible at colorgradingacademy.com (the "Site"), through which we provide courses, live sessions, assignments, certificates, and related services (collectively, the "Services"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have.

If you have questions about this policy or your personal information, contact us at hello@colorgradingacademy.com.

Colour Training Inc. is a corporation with its mailing address at:

2. Scope

This Privacy Policy applies to colorgradingacademy.com and to the Services we provide through it.

It does not apply to third-party websites, services, or platforms that we link to but do not control — including, importantly, the Discord servers we operate as community spaces. When you join our Discord community, your participation there is governed by Discord's own terms and privacy policy in addition to this Policy.

3. What We Collect

3.1 Account registration

When you create an account on CGA (which is hosted on Kajabi), we collect your name, email address, and a password that you set. If you sign up through a third-party identity provider, we receive the basic profile information that provider shares with us. Depending on the course or program, we may also collect optional information such as your country, professional role, or experience level.

3.2 Course progress and certificates

When you take a course, our learning platform records your progress — including which lessons you have started or completed, quiz and assessment results, and total time spent — so that we can deliver the course, track completion, and issue certificates of completion where applicable. Certificates may include your name, the course title, and the completion date.

3.3 Payments

When you purchase a course, subscription, or other paid product, payment is processed by Stripe(in some cases via Kajabi's integration with Stripe). We receive transaction metadata such as amount, currency, country, and the last four digits and brand of your card. We do not receive or store full payment card numbers. Please see Stripe's privacy notice for details on its handling of payment data.

3.4 Course videos (Vimeo)

Course videos are hosted on Vimeoand embedded into our Kajabi-powered Site. When you watch a video, Vimeo collects technical and playback data, which may include IP address, device and browser information, and aggregate playback metrics. See Vimeo's privacy policy for further details.

3.5 Live sessions (Zoom)

We use Zoom for live sessions, webinars, and Q&A events. When you join a live session, Zoom collects information such as your name (as you enter it), email, IP address, device information, and any audio, video, chat, or screen-sharing content you choose to share. Live sessions may be recordedfor later distribution to enrolled students; we will indicate when a session is being recorded. Please see Zoom's privacy statement for further details.

3.6 Discord community, assignments, and submissions

A core part of CGA's community experience takes place on Discord. Students submit assignments, upload their own work for critique, ask questions, comment, and participate in the forum on our Discord servers.

When you join our Discord servers, Discord is the operator of that platform and processes your data under its own terms and privacy policy. We see and process Discord content (your messages, files, screenshots, video uploads, profile name, and server activity) in our role as server administrators, in order to:

• Deliver and grade assignments and provide feedback;
• Moderate the community and enforce community rules;
• Provide support;
• Improve our courses and curricula.

Please do not upload anything to Discord that you would not want shared in the relevant channel. Once you post material in a Discord server, other members of that server can see it and may copy or reshare it. We have limited control over what Discord retains and over what other members may do with your posts.

3.7 AI chatbot tutor

The Services include an AI chatbot tutor that students can interact with for help and guidance. When you use the chatbot, your prompts and any content you share with it are transmitted to our AI provider (currently OpenAI) for processing, and the provider's response is returned to you. Per OpenAI's API policies, content submitted via the API is not used to train OpenAI's models. We may also store transcripts of chatbot conversations associated with your account to provide continuity, improve the tutor, and address support issues.

Please do not share sensitive personal information (financial data, medical data, credentials, etc.) with the chatbot tutor.

3.8 Support and communications

When you contact our support team, we receive the contents of your message and your contact details via Zendesk.

When we send marketing or transactional emails (course announcements, lesson drops, live-session reminders), we use Kit (the email service formerly known as ConvertKit), which receives your name, email, and email engagement data (open and click events). You can unsubscribe at any time using the link in any email.

3.9 Website analytics and cookies

We use Google Analytics on the Site to understand aggregate traffic and usage. Google Analytics sets cookies and collects information including a truncated IP address, browser type, device type, pages visited, and referrer.

We use cookies and similar technologies for:

• Essential site and platform functionality (such as authentication state and shopping-cart sessions);
• Analytics (Google Analytics);
• Other functionality as set by Kajabi, Vimeo, and other embedded services.

You can manage cookies through your browser settings. Where required by law (including in the EU, UK, and California), we display a cookie banner and obtain consent before setting non-essential cookies.

4. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the Services;
• Deliver courses and live sessions you have enrolled in;
• Track your progress and issue certificates;
• Operate community spaces, including moderation;
• Process payments and manage your account;
• Provide support;
• Send transactional and (with consent where required) marketing communications;
• Improve our courses, content, and platform;
• Detect and prevent fraud, abuse, and security incidents;
• Comply with legal obligations.

5. Legal Bases for Processing (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar laws, we rely on the following legal bases:

• Contract — to provide the Services you have signed up for (account, courses, certificates, support).
• Legitimate interests — to secure the Services, prevent fraud, analyze aggregate usage, moderate our community, and improve our products. We balance these interests against your rights and freedoms.
• Consent — for marketing emails (where required) and for non-essential cookies. You can withdraw consent at any time.
• Legal obligation — where we must process data to comply with applicable law.

6. How We Share Information

We do not sell your personal information. We share information with the following categories of service providers, each of which acts as our processor or sub-processor and is contractually bound to protect your data:

We may also disclose information when required by law, court order, or valid government request; to enforce our terms; to protect our rights, property, or safety, or those of others; or in connection with a merger, acquisition, financing, or sale of assets (in which case we will notify you and any successor will be bound by this policy or provide notice of changes).

7. International Data Transfers

We are based in the United States. When you use the Services from outside the United States, your information will be transferred to and processed in the United States and in other countries where our service providers operate. Where required, we rely on Standard Contractual Clausesapproved by the European Commission and the UK Information Commissioner's Office, the UK International Data Transfer Addendum, or other lawful transfer mechanisms.

8. Data Retention

We retain personal information for as long as necessary to provide the Services and for the purposes described in this policy:

• Account data: retained while your account is active and for up to 12 months after account closure for legal and operational purposes.
• Course progress and certificates: retained while your account is active so you can continue to access your records. After account closure, we may retain certificate-issuance records for up to 5 years for verification purposes.
• Live session recordings: retained for as long as the relevant course or program offers them as part of the curriculum, and thereafter as a teaching archive unless you ask us to remove your contributions.
• Discord content: subject to Discord's own retention; we generally do not delete community history, but we may delete specific content on request, subject to our moderation needs.
• AI chatbot transcripts: retained for up to 24 months, or until you delete them or close your account.
• Email engagement data: retained while you are subscribed and for up to 12 months after you unsubscribe.
• Payment records: retained as required by tax and accounting law (typically 7 years).
• Support tickets: retained for up to 24 months after resolution.

We may retain information for longer where required by law or to resolve disputes.

9. Security

We use industry-standard administrative, technical, and physical safeguards designed to protect your information, including encryption in transit (TLS), encryption at rest where applicable, access controls, and regular security review of our infrastructure and our service providers. No system is perfectly secure; we cannot guarantee absolute security.

10. Your Rights

10.1 GDPR / UK GDPR (residents of the EU, EEA, and UK)

You have the right to:

• Access the personal information we hold about you;
• Rectify inaccurate or incomplete information;
• Erase your personal information ("right to be forgotten");
• Restrict or object to processing;
• Data portability — receive your data in a structured, machine-readable format;
• Withdraw consent at any time, where consent is the legal basis for processing;
• Lodge a complaint with your local data protection supervisory authority.

10.2 California (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and (if applicable) sell or share;
• Access and delete your personal information;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of personal information. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising;
• Limit the use of sensitive personal information — we do not use sensitive personal information for purposes beyond what is necessary to provide the Services;
• Non-discrimination for exercising your privacy rights.

10.3 How to exercise your rights

To exercise any of these rights, email hello@colorgradingacademy.com. We will respond within the timeframes required by applicable law (typically within 30 days under the GDPR and within 45 days under the CCPA, with extensions where permitted). We may need to verify your identity before fulfilling your request.

You may designate an authorized agent to make a request on your behalf where applicable law permits.

11. Children

The Services are intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact hello@colorgradingacademy.com and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" at the top of this page. For material changes, we will provide additional notice — such as an email to registered users or a prominent notice on the Site — before the change takes effect.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information:

Email: hello@colorgradingacademy.com