Terms & conditions
Last updated: [PENDING]. Applies to purchases made on cultaconsulting.com.
What you buy is a licence to one named person for one course, for as long as we run the platform. The structure this page assumes: who we are, what you are buying, what you may and may not do with it, what we promise about availability, how disputes are handled, and which law applies.
- Single named learner per licence; team licences are invoiced separately
- Concurrent-session limit stated here, because the platform enforces one
- Downloads are yours to keep; redistribution is not permitted
Privacy policy
Controller: Culta Consulting, cultaconsulting.com. Hosted in the UK — IONOS, Birmingham data centre.
If you’re in the EU, your data leaving the EU to be hosted in the UK counts as an international transfer. That transfer doesn’t need a separate safeguard: the UK has an adequacy decision from the European Commission, which means EU law already treats UK data protection as equivalent. Nothing extra for you to sign or agree to — this paragraph exists so the fact is stated, not buried.
The requirement here is an inventory, not prose. A privacy policy that does not enumerate the actual fields is the kind of document that fails an audit quietly.
| What | Why | Basis | Kept |
|---|
| Name, email, password hash | Your account and access to what you bought | Contract | Until you delete it |
| Order + invoice record | Accounting and VAT | Legal obligation | Statutory period, pseudonymised after erasure |
| Lesson progress, quiz results | Resume where you left off; mark the course complete | Contract | Until you delete it |
| Record of completion (your name, course, date, serial) | Showing you completed the course; anyone you give the serial to can check it is genuine | Contract | Until you delete your account — erasure removes your name from the public check |
| Card details | Never touch our servers — handled by Stripe | — | Not stored by us |
| Page views (Umami, self-hosted) | Which pages are worth keeping | Legitimate interest | Aggregate only, no identifier |
| Newsletter address (Listmonk, self-hosted) | Sending the newsletter you asked for | Consent (double opt-in) | Until you unsubscribe |
Your controls
Export and deletion are self-serve in your account area, not an email request. Deleting your account removes your profile and progress; the pseudonymised invoice record survives because tax law requires it, and this page says so plainly rather than hiding it.
Refunds
Fourteen days, full refund, no explanation required — the same sentence used on every course page. If this policy ever changes, it changes in both places or neither. A refund promise that differs between the sales page and the legal page is a false claim, not an inconsistency.
Cookies & analytics
We set a session cookie when you log in. That is the list.
- No third-party pixels. No ad networks, no social trackers, no session recorders. This is enforced by our content-security policy, not by intention.
- Analytics is self-hosted Umami, configured to set no cookie and no persistent identifier.
- Fonts are served from our own domain, so no font CDN sees your IP.
The load-bearing dependency behind “no consent banner”[PENDING] This position rests entirely on the deployed Umami genuinely setting no identifier and on no third-party pixel existing. Both are verified elsewhere (Phase 6 item 6.10 and Lane A item A.6). If either becomes false, this section is wrong, a banner is required, and the reserved consent slot in the layout is used. Do not edit this copy to accommodate a pixel — escalate instead.