At Budget Light (budgetlightup.com), we take the protection of your personal data very seriously. This GDPR policy explains what data we collect, how we process it, and what rights you have under the EU General Data Protection Regulation when you use our budgeting courses and tools.

1. Data We Collect

We process the following categories of personal data:

• Contact & Identification Data: Name, email address, phone number, billing address.
• Account & Service Data: Course enrollments, progress tracking, subscription status.
• Technical Data: IP address, browser type, device information, cookies.
• Usage Data: Pages visited, time spent on lessons, interaction events, referrer URLs.

2. Purpose & Legal Basis

We use your data to:

• Provide and manage your course access and related services;
• Process payments and manage billing;
• Communicate updates, tips, and support materials;
• Improve our course content and platform functionality;
• Comply with legal and regulatory obligations.

Processing is based on Article 6(1)(b) GDPR (performance of a contract) and Article 6(1)(f) GDPR (our legitimate interest in operating and improving our services).

3. Data Sharing

We share personal data only with:

• Payment processors (e.g., Stripe);
• Email service providers;
• Analytics services (e.g., Google Analytics);
• Legal authorities, when required by law.

4. Data Retention

We retain your data only as long as necessary to fulfill the purposes above or as required by law. Course progress and subscription records are kept for as long as your account remains active.

5. Your Rights

You have the right to:

• Access your personal data (Art. 15 GDPR);
• Correct inaccurate data (Art. 16 GDPR);
• Request deletion (“right to be forgotten”) (Art. 17 GDPR);
• Restrict processing (Art. 18 GDPR);
• Data portability (Art. 20 GDPR);
• Object to processing (Art. 21 GDPR).

To exercise any of these rights, contact us by post at:

Budget Light
2500 7 Avenue SW
Calgary, Alberta, Canada
Business Number (BN): 841-372-059

6. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. However, no system can guarantee absolute security.