Privacy Policy

1. Introduction and Who We Are

BlackHaus University ("BlackHaus University," "we," "us," or "our") operates the website located at blackhausuniversity.com and delivers online education programs, courses, and related digital services (collectively, the "Services").

This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you visit our website, create an account, enroll in a course, or otherwise interact with our Services. Please read this policy carefully. By using the Services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy is incorporated by reference into our Terms and Conditions. In the event of any conflict between this Policy and the Terms and Conditions with respect to data privacy, this Policy controls.

If you have questions or concerns about this policy or our data practices, contact us at: privacy@blackhausuniversity.com. Our mailing address is: BlackHaus University, 1325 Heights Park Dr SE, Atlanta GA 30316.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you give us when you:

• Create an account: name, email address, username, and password.
• Enroll in a course or program: billing address, and payment information processed by our payment processor (Stripe). We do not store your full credit card number or CVV on our servers.
• Complete your profile: optional information such as your profession, business type, location, or photo.
• Participate in course forums, submit assignments, or contact our support team: any content you choose to share.
• Submit a testimonial, review, or feedback: name, likeness (if provided), and story.
• Sign up for our email list or marketing communications: email address and communication preferences.

2.2 Information Collected Automatically

When you access or use our Services, we and our third-party service providers automatically collect certain technical and usage information, including:

• Log data: IP address, browser type and version, operating system, referring URLs, pages visited, time and date of visits, and time spent on pages.
• Device information: device type, device identifiers, and mobile network information.
• Course activity data: lessons viewed, modules completed, quiz scores, completion percentages, and login timestamps. This data is used to track your progress and to enforce our refund policy (see Terms and Conditions §7.1).
• Cookies and similar tracking technologies: including the Meta Pixel (Facebook), Google Analytics, and related tracking tools. See Section 7 for full details.

We currently use the Meta Pixel and Google Analytics to measure website traffic and the effectiveness of our advertising campaigns. These tools may collect your IP address, browser type, pages visited, and actions taken on our website.

2.3 Information from Third Parties

We may receive information about you from third parties in limited circumstances, including:

• Payment processors (Stripe): transaction confirmation, billing address, and last four digits of your card for receipt purposes.
• Kajabi: course enrollment status, progress data, access logs, and account activity. Kajabi's privacy policy is available at kajabi.com/privacy.
• Social login providers (if enabled): if you choose to sign in using a social account (e.g., Google), we receive your name and email address from that provider.
• Mailchimp (The Rocket Science Group, LLC): if you subscribe to our marketing list, your email address and communication preferences are shared with Mailchimp to manage email delivery. Mailchimp's privacy policy is available at mailchimp.com/legal/privacy.

3. How We Use Your Information

We use the information we collect for the following purposes:

We will not use your personal information for purposes materially different from those described above without notifying you and, where required, obtaining your consent.

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share your information only in the following circumstances. For purposes of this section, "Deidentified Information" means information that cannot reasonably identify, relate to, or be linked to a particular individual, and for which we have implemented technical safeguards and business processes that prohibit re-identification. "Aggregate Information" means information relating to a group or category of individuals from which individual identities have been removed.

4.1 Service Providers

We share information with trusted third-party vendors who assist us in operating our Services, including:

• Payment processing: Stripe, Inc. — processes payment transactions. Privacy policy: stripe.com/privacy.
• Learning management system: Kajabi — hosts course content, tracks enrollment and progress, and manages student accounts. Privacy policy: kajabi.com/privacy.
• Email communications: Mailchimp (The Rocket Science Group, LLC) — manages marketing and transactional email delivery. Privacy policy: mailchimp.com/legal/privacy.
• Analytics and advertising: Google Analytics (Google LLC) and Meta Pixel (Meta Platforms, Inc.) — help us understand how our website is used and measure the effectiveness of our advertising. Google privacy policy: policies.google.com/privacy. Meta privacy policy: facebook.com/privacy/policy.
• Website hosting: GoDaddy (GoDaddy Operating Company, LLC) — hosts our primary website domain and associated files. Privacy policy: godaddy.com/agreements/privacy. Course platform hosting: Kajabi — hosts all course content, student data, and LMS infrastructure (see above).

These providers are contractually obligated to use your information only as directed by us and consistent with this Privacy Policy.

4.2 Business Transfers

If BlackHaus University is involved in a merger, acquisition, asset sale, or similar transaction, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website before your personal information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if we believe in good faith that disclosure is necessary to: (a) comply with a legal obligation, court order, or government request; (b) protect and defend the rights or property of BlackHaus University; (c) prevent or investigate possible wrongdoing in connection with the Services; or (d) protect the personal safety of users of the Services or the public.

4.4 With Your Consent

We may share your information for purposes not described in this policy when we have your explicit consent to do so.

4.5 Deidentified and Aggregate Information

We may use personal information to create Deidentified Information or Aggregate Information and may share such information with third parties for analytical purposes. Deidentified and Aggregate Information does not identify you personally and is not subject to the restrictions in this Privacy Policy.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account data: retained for the duration of your account and for up to three (3) years after account closure, to support dispute resolution and legal compliance.
• Course progress and completion data: retained for a minimum of three (3) years to support refund policy enforcement and to provide records of your educational history upon request.
• Payment records: retained for seven (7) years as required for tax and financial recordkeeping.
• Marketing communications data: retained until you opt out or request deletion, whichever occurs first.
• Support correspondence: retained for up to two (2) years after the matter is resolved.

When personal information is no longer needed, we delete or anonymize it in accordance with our internal data management procedures.

6. Security of Your Data

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Reliance on our payment processor (Stripe) and LMS platform provider, each of which maintains their own security programs appropriate to the services they provide.
• Encrypted data transmission via HTTPS/TLS for all pages on our website.
• Access controls limiting who within our organization can access personal data.
• Prompt notification procedures if a data breach affecting your personal information is discovered.

No method of electronic transmission or storage is 100% secure. We cannot guarantee the absolute security of your data. If you believe your account has been compromised, please contact us immediately at privacy@blackhausuniversity.com.

7. Cookies and Tracking Technologies

7.1 What We Use

We use cookies and similar tracking technologies (such as web beacons and pixels) to operate and improve our Services. Cookies are small text files stored on your device.

A cookie consent banner is displayed on our website allowing you to accept or decline non-essential cookies (analytics and marketing) when you first visit. Strictly necessary and functional cookies cannot be disabled as they are required for the Services to operate.

7.2 Your Cookie Choices

You can control cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Note that disabling strictly necessary cookies may prevent parts of our Services from functioning correctly. You may also opt out of analytics cookies by using the opt-out tools provided by the specific analytics provider (e.g., Google Analytics Opt-out Browser Add-on).

Some web browsers and devices permit you to broadcast a Do-Not-Track ("DNT") preference signal. Because standards for DNT signals are not yet uniform across the industry, our Services do not currently respond to DNT signals. We will revisit this position as industry standards develop.

8. Third-Party Links and Services

Our Services may contain links to third-party websites, tools, or services that are not operated by us. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the content or privacy practices of third-party websites.

Our course content may reference or recommend third-party tools, contractors, software, or platforms. Any data you share directly with those third parties is governed by their respective privacy policies.

9. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at privacy@blackhausuniversity.com and we will take steps to delete that information promptly.

If we become aware that we have inadvertently collected personal information from a child under 18, we will delete such information from our records as soon as reasonably practicable.

10. Your Choices and Opt-Out Rights

10.1 Marketing Communications

You may opt out of receiving marketing emails from us at any time by clicking the "Unsubscribe" link in any marketing email, or by contacting us at privacy@blackhausuniversity.com. Please note that opting out of marketing communications does not opt you out of transactional emails related to your account or purchases (such as receipts, password resets, or course access notifications), which are necessary to provide the Services.

10.2 Account Information

You may review and update your account information by logging into your account and visiting your profile settings. If you need assistance updating or correcting your information, contact us at privacy@blackhausuniversity.com.

10.3 Targeted Advertising

You may opt out of interest-based or targeted advertising delivered through the Meta Pixel by visiting facebook.com/ads/preferences. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on. Please note that opting out of targeted advertising does not mean you will stop seeing advertisements; it means those advertisements will not be tailored to your interests based on your online behavior.

10.4 Testimonials

If you have submitted a testimonial and wish to have it removed from our marketing materials, you may opt out by sending a written request to privacy@blackhausuniversity.com. Opt-out requests will be honored within 30 days of receipt and applied prospectively to new marketing materials.

10.5 Cookies

See Section 7.2 for your cookie management options.

11. Your Data Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request that we delete your personal information, subject to certain legal exceptions (e.g., we may be required to retain financial records).
• Portability: request that we provide your personal information in a structured, machine-readable format.
• Objection: object to certain uses of your personal information, such as direct marketing.
• Restriction: request that we restrict processing of your personal information in certain circumstances.

To exercise any of these rights, contact us at privacy@blackhausuniversity.com with the subject line "Data Rights Request." We will respond within 45 days of receiving a verifiable request. If your request is particularly complex or you have made multiple requests, we may require an additional 45 days and will notify you of the delay and the reason for it. We will verify your identity by matching the email address in your request to the email address associated with your BlackHaus University account. For deletion or portability requests, we may also ask you to confirm your full name and enrollment history.

No fee is required to exercise your rights, except that we reserve the right to charge a reasonable administrative fee or decline to respond to requests that are clearly unfounded, repetitive, or excessive.

You may designate an authorized agent to submit a request on your behalf. To do so, you must provide the authorized agent with written permission and we may require you to verify your own identity directly with us before we process the request.

We will not discriminate against you for exercising your data rights.

12. California Residents — CCPA / CPRA Disclosures

This section applies to residents of California and supplements the rest of this Privacy Policy. If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information.

12.1 Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information:

We do not collect sensitive personal information as defined by the CPRA (such as Social Security numbers, financial account credentials, precise geolocation, or biometric data) in the ordinary course of our operations.

12.2 Sources of Personal Information

We collect personal information directly from you, automatically through your use of our Services, and from third-party service providers including Stripe (payment processing), Kajabi (LMS), Mailchimp (email), Google Analytics, and Meta Pixel, as described in Section 2.

12.3 Business Purposes for Collection

We collect personal information for the business purposes described in Section 3 of this Privacy Policy.

12.4 Disclosure of Personal Information

In the past 12 months, we have disclosed personal information to the following third parties for business purposes: Stripe (payment processing), Kajabi (learning management), Mailchimp (email communications), Google LLC (analytics), and Meta Platforms, Inc. (advertising pixel). We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising without your consent.

12.5 Your CCPA / CPRA Rights

As a California resident, you have the right to:

• Know: request disclosure of the categories and specific pieces of personal information we have collected about you and the purposes for which it is used.
• Delete: request deletion of personal information we have collected, subject to exceptions.
• Correct: request correction of inaccurate personal information.
• Opt out of sale or sharing: we do not sell personal information. If this changes, we will update this policy and provide an opt-out mechanism.
• Limit use of sensitive personal information: we do not collect sensitive personal information as defined by the CPRA.
• Non-discrimination: we will not discriminate against you for exercising your CCPA/CPRA rights.

To submit a CCPA/CPRA request, contact us at: privacy@blackhausuniversity.com (subject line: "California Privacy Request") or by mail at: BlackHaus University, 1325 Heights Park Dr SE, Atlanta GA 30316. We will acknowledge your request within 10 business days and respond within 45 calendar days. We will verify your identity by matching your request to the email address on file for your account. You may designate an authorized agent to submit a CCPA/CPRA request on your behalf by providing written authorization and verifying your identity directly with us.

13. Interstate and International Data Transfers

BlackHaus University is based in Georgia, United States. If you access our Services from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

Note — If you enroll students from the European Union or United Kingdom, you are required to implement GDPR-compliant data transfer mechanisms (such as Standard Contractual Clauses) and add a full GDPR section to this policy, including lawful basis for processing, data subject rights under Articles 15–22, and contact information for your Data Protection Officer (or representative). Contact your attorney before accepting EU enrollments without these disclosures in place.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes (such as changes to what data we collect, how we use it, who we share it with, or your rights regarding your data), we will notify you by:

• Posting the updated policy on our website with a revised "Last Updated" date at the top of this page; and
• Sending an email notification to the email address associated with your account, at least 14 days before the changes take effect.

Your continued use of the Services after the effective date of the updated policy constitutes your acceptance of the revised terms. If you do not agree to the changes, you must stop using the Services before the effective date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will respond to all privacy inquiries within 30 days of receipt. If you are a California resident submitting a CCPA/CPRA request, see Section 12.5 for specific response timelines.