Privacy Policy

Scope and who we are

This Privacy Policy applies to GlobalCook Courses websites, services, and communications (collectively, the “Services”). “GlobalCook Courses,” “we,” “us,” and “our” refer to the provider of the Services.

If a conflict exists between this policy and a local mandatory law, that law may provide you with additional rights.

Data we collect

We collect data in three main ways: (1) data you provide, (2) data generated by your use of the Services, and (3) data from optional technologies like cookies (where permitted and based on your choices).

• Account information: name, email address, password or authentication tokens, and profile settings.
• Course activity: enrollments, progress, completion status, saved recipes or lesson notes, and preferences (e.g., dietary focus).
• Communications: messages to support, feedback, survey responses, and related metadata (date/time, subject).
• Payment-related data: billing contact information and transaction identifiers. Payment details (such as full card numbers) are typically processed by payment providers, not stored by us.
• Technical data: IP address, device type, browser, OS, language, referral URL, app/site interactions, and approximate location derived from IP for time zone and fraud prevention.
• Cookie and local storage data: strictly necessary settings and—if you opt in—analytics preferences.

How we use data

We use your data to operate, secure, and improve the Services. We do not sell your personal information.

• Provide and improve courses, features, and support.
• Authenticate users, maintain sessions, and prevent abuse or fraud.
• Personalize schedules, recommendations, and the learning experience.
• Communicate important updates (e.g., policy changes, security notices) and respond to your requests.
• Measure performance and reliability; optional analytics are off by default where required.
• Comply with legal obligations, enforce terms, and protect rights and safety.

Legal bases (EEA/UK)

If you are in the EEA/UK, we process personal data under one or more legal bases:

• Contract: to provide the Services you request (e.g., account access and course delivery).
• Legitimate interests: to secure and improve the Services, prevent fraud, and deliver reliable support (balanced against your rights).
• Consent: for optional analytics and certain non-essential cookies where required by law.
• Legal obligation: to meet applicable laws, regulations, and lawful requests.

Sharing and disclosure

We may share personal data with trusted service providers that help us operate the Services, under contractual confidentiality and security obligations.

• Service providers (processors): hosting, customer support tools, email delivery, and payment processing.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets (with appropriate safeguards).
• Legal and safety: to comply with law, respond to lawful requests, protect against misuse, or protect rights and safety.

We do not knowingly share data with third parties for their own marketing purposes without your consent where required.

International transfers

Because we serve a global audience, your data may be processed in countries other than your own. Where required, we use appropriate safeguards (such as standard contractual clauses) to protect personal data when transferred internationally.

Data retention

We retain personal data only as long as necessary for the purposes described in this policy, including to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on data type and legal requirements.

Security

We implement reasonable administrative, technical, and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is 100% secure; you are responsible for keeping your login credentials confidential.

Your rights

Depending on your location, you may have rights to access, correct, delete, or export your data, and to object to or restrict processing. You may also have the right to withdraw consent at any time for processing based on consent.

• Access: request a copy of personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Deletion: request deletion, subject to legal exceptions.
• Portability: receive data in a structured, commonly used format (where applicable).
• Objection/Restriction: object to certain processing or request restriction.
• Appeal/Complaints: you may lodge a complaint with a supervisory authority (EEA/UK) or relevant regulator.

To exercise rights, contact us using the details below. We may request verification to protect your account and prevent unauthorized requests.

Cookies

We use strictly necessary cookies to operate the site and maintain essential preferences. We also support optional analytics cookies (off by default where required). You can manage preferences in the cookie banner.

• Strictly necessary: enable core functionality such as session continuity and security.
• Preferences: store settings like theme choice (light/dark) when you choose to save it.
• Analytics (optional): help us understand usage to improve the Services; only enabled if you opt in where required.

Children’s privacy

The Services are not directed to children under the age where parental consent is required by applicable law. If you believe a child has provided personal data, contact us so we can take appropriate steps.

Third-party links

Our Services may reference third-party services. Their privacy practices are governed by their own policies. We encourage you to review those policies before providing personal data.

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and update the “Last updated” date. If changes are material, we may provide additional notice as required by law.

Last updated:

Contact

Questions or requests? Email [email protected] or call +1 (415) 555-0198.

If you are contacting us about a privacy request, include the email associated with your account and a brief description of your request.