Privacy Policy

Last updated: —

This Privacy Policy explains how Beamtendon ("we", "our", "us"), a small studio based in Chicago, Illinois, collects, uses, stores and shares personal information about people who visit our website, sign up for a newsletter, contact us through our forms or take part in one of our programs. We have written it in plain language because we believe privacy notices should be readable, not designed to be ignored.

1. Scope of this policy

This policy applies to the website operated under the brand Beamtendon and to any interaction you have with our team through email, phone or in-person sessions arranged through this site. It does not apply to third-party websites that we may link to. Those services have their own privacy policies which we encourage you to read.

2. The information we collect

2.1 Information you give us

• Your name and email address when you complete the contact form.
• The content of the message you choose to send us.
• Optional information you share during program intake conversations (for example, the goals you would like to work on).
• Payment information processed by our payment provider when you purchase a program. We never see or store full card numbers.

2.2 Information collected automatically

• Standard server logs including IP address, browser type, referring page and timestamps.
• A minimal cookie that remembers whether you have dismissed the privacy notice on this site.
• Aggregated analytics about which pages are visited most often, where users come from and how long they stay.

3. How we use your information

We use the information described above for the following purposes:

1. To respond to messages you send us through the contact form or by email.
2. To deliver the program you have signed up for, including scheduling sessions and sending materials.
3. To improve the website, identify navigation problems and plan new content.
4. To meet our legal and accounting obligations, including invoicing and tax records.
5. To send occasional updates about new program dates, but only if you have explicitly opted in.

4. Legal bases for processing

When the General Data Protection Regulation (GDPR) or comparable laws apply to your data, we rely on one of these bases: your consent, our performance of a contract with you, our legitimate interest in running the studio in a responsible way, or compliance with a legal obligation. You can withdraw consent at any time without affecting prior processing.

5. Sharing your information

We do not sell your personal information. Ever. We share it only with the small number of service providers required to operate the studio, namely:

• Our email service, used to send and receive messages from the studio inbox.
• Our payment processor, which handles card transactions on our behalf.
• Our hosting provider, which runs the servers behind this website.
• Our accountants, where invoicing data must be reviewed for tax purposes.

Each of these providers is bound by contractual confidentiality terms and may only use the data we share for the specific purpose for which it was shared.

6. How long we keep your information

Contact form submissions are kept for up to 24 months unless we are in active conversation with you. Program participant records are retained for the duration of the program plus 36 months for support purposes. Financial records are kept for the period required by United States tax law, currently seven years. After these periods elapse, data is either anonymised or deleted.

7. Your rights

Depending on where you live, you may have the right to:

• Request access to the personal data we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Request deletion of your data in defined circumstances.
• Object to certain types of processing, including direct marketing.
• Request a copy of your data in a portable format.
• Lodge a complaint with the data protection authority in your country of residence.

To exercise any of these rights, write to us using the contact details on the Contact page. We aim to respond within thirty calendar days.

8. International transfers

Our servers and most of our service providers are located in the United States. If you are writing to us from outside the United States, the personal data you submit will be transferred to and processed in the United States. We use service providers who offer appropriate safeguards as required by applicable data protection laws.

9. Security

We protect personal data with reasonable administrative and technical measures: encrypted connections (HTTPS) across the site, restricted access to the studio inbox, two-factor authentication on all internal accounts, and regular reviews of who has access to what. No system can guarantee absolute security, but we take the responsibility seriously and review our practices each quarter.

10. Children

Our services are designed for adults. We do not knowingly collect personal information from anyone under the age of sixteen. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this policy

We will update this policy when our practices change, when we add a new service provider or when the law requires it. The "Last updated" date at the top of this page always reflects the most recent revision. Material changes will be highlighted on the website for at least thirty days.

12. Contacting us

If you have any questions about this policy, please reach out using the studio details on our Contact page. We will do our best to give you a clear, plain-language answer.