Privacy Policy

Effective as of: September 20, 2026

Your Training Place, LLC doing business as Body Art Training Group is committed to respecting your privacy rights when accessing our website – BodyArtTrainingGroup.com  ("Site"). We created this Privacy Policy ("Policy") to explain what information we collect when you visit or use our Site, how we use that information, and who has access to it.

1. NOTICE CONCERNING MINORS. Our Site is directed at adults. Our Terms of Use require account holders to be at least 18, and we do not knowingly collect personal information from anyone under 18. This includes children under 13, from whom we do not knowingly collect personal information, consistent with the Children's Online Privacy Protection Act [15 U.S. Code § 6502] and the COPPA Rule [16 CFR Part 312]. We do not request date of birth at registration. If we learn that we have collected Personal Information from a person under 18, we will close the account and delete the Personal Information associated with it, except for information we reasonably need to retain as described in Section 6.C. Any certificate issued to that person will be invalidated. Please contact us immediately if you believe a person under 18 is using the Site.

2. PERSONAL INFORMATION COLLECTED.

A. Information Collection. For you to access the Site, we may require you to provide us with certain information that personally identifies you ("Personal Information"). Personal Information may include the following categories of information: (1) Contact Data such as your legal first and last name, email address, billing address, phone number, and preferred language; (2) Verification Data, which applies only if you enroll in a Course requiring identity verification, and may include the last four digits of your Social Security number (optional), a copy of your government-issued photo identification, and publicly available information about you used to generate identity verification questions; (3) Financial Data, which is collected directly by our payment processor. We currently use PayPal. We do not collect, receive, or store your credit card or other financial account information.

B. SMS and Mobile Information. We do not share, sell, or rent your mobile phone number or any personal information collected through SMS messaging with third parties for their marketing purposes.

Your mobile number will only be used to send you the SMS messages you have opted in to receive. You may opt out of receiving SMS messages at any time by replying STOP. For assistance, reply HELP or contact our support team directly by using the Contact Us page on the Site.

C. Modification, Termination, or Canceling.

• Email Communications — We may send commercial email messages to you on occasion. To stop receiving such messages, click the unsubscribe link at the bottom of each email. We will also send administrative emails about your account, your Courses, and other service matters. You cannot elect to forgo those communications.
• Profile In the Site — To change your personal information on the Site, log in to your account and use the My Account feature found in the upper right of the Site. Your name and email address cannot be changed through My Account; to change either, contact us. Your email address is used to identify you throughout the system.
• ID Verification Courses — If your identity has been verified for a Course, a name change requires that you provide a government-issued ID confirming the change.
• Canceling — To cancel an order or account, contact us through the Contact Us page on the Site.

D. Privacy Policy Updates. If we modify or update this Policy, we will post the revised Privacy Policy on the Site and update its Effective Date. For material changes, we will post a notice on the Site's login page and on the Privacy Policy page at least thirty (30) days before the changes take effect.

E. Website Analytics. We use Google Analytics to understand how visitors interact with our Site. Google uses cookies and similar technology to collect this information and acts as our service provider; we have configured Google Analytics so that Google does not use this data for its own advertising purposes. We use what we learn to understand traffic patterns, improve the Site, and measure the effectiveness of our own marketing. You may opt out of Google Analytics by installing Google's opt-out browser add-on at https://tools.google.com/dlpage/gaoptout/.

3. COOKIES AND TRAFFIC DATA COLLECTED.

A. Cookies. Cookies are small data files or similar technologies used by websites for functions such as remembering information and understanding website usage. We use cookies and similar technologies for website functionality and analytics. We do not use advertising cookies, remarketing, or retargeting services. You can manage or delete cookies through your browser settings.

B. Traffic Data. We automatically track and collect the following categories of information when you visit our Site: (1) IP addresses; (2) domain servers; (3) types of computers accessing the Site; and (4) types of web browsers used to access the Site (collectively "Traffic Data"). Traffic Data is not used to identify you personally, but is helpful for our own marketing purposes and for improving your experience when using the Site.

4. USE OF INFORMATION COLLECTED.

A. Our Use Of Information. We use your Personal Information to provide Courses, communicate with you, market our products and services, verify identity where required, operate and improve the Site, and comply with applicable law. The specific uses are described below.

B. Sharing Personal Information. We share certain categories of information with service providers who perform core functions for us — hosting, email distribution, data storage, analytics, identity verification, and secure form collection. These providers may use your information only to perform those services for us, and not for their own purposes.

We share Contact Data with LearningCart, our hosting and platform provider, and with Google, whose Workspace email service we use to correspond with you. If we use a third-party email service to send commercial email, we will share your email address and name with that provider for that purpose. If you enroll in a Course requiring identity verification and are a U.S. resident who has indicated English as your preferred language, we share your user profile information with EVS, our identity verification provider. If you are asked to submit identification, we receive it through Jotform, our secure form provider — in each case solely for the purposes described in Section 4.D.

We do not share your Personal Information with third parties for their own marketing or other purposes. If you prefer that we not share your Personal Information with our service providers, contact us — but please understand that we cannot operate your account or deliver Courses without doing so.

C. Use of Contact Data. We use your Contact Data to provide you with administrative communications such as email messages confirming orders. We also use your Contact Data to send you commercial emails highlighting our products and business developments. We do not sell or rent your email address. We may also call you about your account or your Course, including to help resolve a problem before it affects your progress.

D. Identity Verification. For Courses that require identity verification, we use Verification Data solely to confirm your identity and investigate suspected fraud in obtaining a certificate of completion, and for no other purpose.

If you enroll in a Course requiring identity verification, you must verify your identity before proceeding. If you are a U.S. resident who has indicated English as your preferred language, we share your user profile, including the last four digits of your Social Security number if provided, with EVS, our identity verification provider, to locate you in its records and generate verification questions from publicly available information. Providing these digits is optional but improves the likelihood EVS can locate you.

If EVS cannot verify you electronically, or if you are not a U.S. resident or have indicated Spanish or Vietnamese as your preferred language — because EVS is less able to verify identity electronically in these circumstances — you will be asked to upload a copy of your government-issued photo identification through Jotform, our secure form provider, which stores it behind two-factor authentication. We use the identification to confirm it matches your account and to create your verification questions manually.

We delete copies of your identification from our systems and Jotform's promptly after creating your verification questions.

E. Financial Data. Your Financial Data is collected and processed directly by our payment processor. We do not collect, receive, or store your credit card or other financial account information. We receive confirmation from the processor that a payment succeeded, along with the information needed to associate the purchase with your account.

You agree to the terms and privacy policy of our payment processor when ordering Courses from us. You further understand and agree that we may use and communicate your Personal Information and history of Course and website usage to third parties including, but not limited to, our legal counsel, administrative agencies, and our payment processor during any billing or legal dispute.

F. Certificate Verification Tool. Certificates we issue for certain Courses can be looked up through the Certificate Verification Tool on the Site. Anyone with a certificate number can enter it and will see the user's name, the Course name, and the date of completion. Nothing else about you is shown, and the tool cannot be searched by name. The tool does not indicate whether a certificate has expired. It shows the date of completion, from which the current period of validity can be determined under the rules of the applicable jurisdiction. If a certificate number does not match a record in our system, including where a certificate has been revoked or the associated account has been closed, the tool will show the number as invalid.

G. Sale of Information. Should we decide to sell all or part of our business or any of the Site at some point in the future, your Personal Information may be included as an asset in the transfer of the business to the new owner.

H. Featured Artists and Social Media. We occasionally feature users on our blog and on our social media accounts, including images of their work and biographical information they provide. We do this only with your written permission, obtained in advance, and only for the content you approve. You may ask us to remove a post at any time by contacting us, and we will do so, though we cannot control copies others may have saved or shared.

5. SECURITY INFORMATION.

A. Site Security. Our Site has security measures designed to help prevent the loss, misuse, and alteration of the information we obtain from you. Although we use reasonable measures designed to protect your information, no method of transmission over the Internet or method of electronic storage is completely secure. We make no assurances about our ability to prevent any such loss, misuse, or alteration, and we disclaim liability to you or any third party arising from it. We will provide notification of a data breach as required by applicable law.

B. Confidentiality and Security of Personal Information. Except as otherwise described in this Privacy Policy, we will keep your Personal Information private. We may disclose Personal Information when reasonably necessary to comply with applicable law or legal process, protect our rights or property, protect public health or safety, enforce the legal documents applicable to the Site, investigate suspected fraud or misconduct, or provide relevant information to a government agency or our payment processor in connection with such an investigation.

C. Lost or Stolen Information. You must promptly notify us if your username or password is lost, stolen, or used without permission. In such an event, we will remove or modify your account to block unauthorized use, but you are solely responsible for any such use prior to notifying us.

6. YOUR PRIVACY RIGHTS.

A. Rights Available to All Users. Regardless of where you live, you may ask us to:

• Tell you what categories and specific pieces of Personal Information we have collected about you, where we got it, why we collected it, and who we have shared it with;
• Provide you a copy of that information in a portable format;
• Correct inaccurate Personal Information;
• Delete your Personal Information; and
• Stop sending you marketing communications.

To make a request, contact us through the Contact Us page on the Site or email Kathy@BodyArtTrainingGroup.com. We will confirm receipt within ten (10) business days and respond within forty-five (45) days. If we need more time, we will tell you why and may take up to an additional forty-five (45) days. We will not deny you goods or services, charge you a different price, or provide a lesser quality of service because you exercised these rights.

B. Verifying Your Request. To protect your information, we will verify your identity before acting on a request. We may ask you to confirm information already associated with your account. An authorized agent may submit a request on your behalf with written permission signed by you, and we may still ask you to verify your identity directly.

C. Limits on Deletion. We may decline to delete information that we reasonably need, including information needed to document a transaction or establish, exercise, or defend a legal claim. If we decline a request in whole or in part, we will tell you why. If we approve a request to delete your account, your transcript and certificate records will also be deleted, and any certificate number issued to you will no longer verify through our Certificate Verification Tool.

D. Sensitive Personal Information. We treat Verification Data — including the last four digits of your Social Security number and copies of government-issued photo identification — as sensitive information. As described in Section 4.D, we use it only to verify your identity and investigate suspected fraud. We disclose it only as reasonably necessary for those purposes or as otherwise described in this Policy. We do not use or disclose it to infer characteristics about you.

E. Sale and Sharing of Personal Information. We do not sell your Personal Information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. We do not use advertising cookies, and we do not use remarketing or retargeting services. We disclose Personal Information only as described in this Policy, including to our service providers and in the other limited circumstances described above.

If we begin selling or sharing Personal Information as defined above, we will treat that as a material change, and we will update this Policy in accordance with Section 2.D and provide the opt-out mechanisms required by law.

F. Opt-Out Preference Signals. Because we do not sell or share Personal Information as defined under California law, there is currently no sale or sharing for an opt-out preference signal, such as Global Privacy Control (GPC), to opt you out of. If that changes, we will honor those signals and update this Policy.

G. California "Shine the Light." California residents may request information about Personal Information we disclosed to third parties for their own direct marketing purposes in the prior calendar year. Send requests to Kathy@BodyArtTrainingGroup.com.

H. Appeals. If we deny your request, you may appeal by replying to our response or by using our Contact Us page. We will respond to your appeal within forty-five (45) days. If we deny your appeal, you may contact your state attorney general or, in California, the California Privacy Protection Agency.

I. Retention. We keep Personal Information only as long as needed for the purposes described in this Policy or as required by law. Transcript and certificate records are generally retained for at least five (5) years unless the associated account and records are deleted in response to an approved deletion request. Copies of government-issued photo identification are deleted as described in Section 4.D. Information you provide at registration, including your name, contact information, and the last four digits of your Social Security number if you provided them, is retained for as long as you maintain an account with us, so that you do not need to re-enter it when purchasing additional Courses. You may request deletion of this information as described in Section 6.A.

7. AREAS BEYOND OUR CONTROL.

Third-Party Websites. The Site contains links to other websites. Please make sure to view the policies of those sites before proceeding.

8. CONTACT INFORMATION.

You can reach us with any questions regarding this Privacy Policy using the Contact Us function on the Site.