Privacy Policy
Last updated: October 5, 2026
1. Who We Are
Learn Factory LLC, a Florida limited liability company at 843 NE 211th St, Miami, FL 33179, United States, operates learnfactory.org (the "Site") and the programmes, sessions, community and services offered through it (the "Services"). We are the controller of the personal data described here.
This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it and what control you have over it. It applies to visitors to the Site, people who apply for or book a call, clients, and members of our community.
It does not apply to third-party websites or platforms we link to, or to how our clients handle the personal data of their own customers. Where we process data on a client's behalf as part of a Done-For-You engagement, we act as a processor under that client's instructions and under the separate agreement signed for that work.
This policy forms part of our Terms of Service. Defined terms used here have the meaning given in the Terms.
For anything in this policy, email support@learnfactory.org.
2. What Data We Collect
| Category | Examples | Where it comes from |
|---|---|---|
| Identifiers | Name, email address, phone number, messenger handle, country and city, time zone | You, when you apply, book, subscribe or buy |
| Business information | Your niche, offer, audience size, revenue range, current tools, goals, stage of business | Your application and onboarding forms, and what you tell us on calls |
| Payment data | Billing name, billing address, last four digits of the card, transaction amount, date and status | Our payment processor. We never see or store your full card number |
| Content you submit | Assignments, drafts, scripts, funnels, spreadsheets, questions, community posts and comments | You, during the Services |
| Session records | Recordings, transcripts, chat logs and notes from live sessions | Our video conferencing platform, where recording is enabled |
| Account and access data | Login identifiers on the community platform, progress, lesson completion, test results | The community and assessment platforms |
| Communications | Emails, messages, support tickets and your replies | You |
| Technical and usage data | IP address, approximate location derived from it, device and browser type, pages viewed, referring page, time on page, cookie and pixel identifiers | Automatically, when you use the Site |
| Marketing data | Source of the lead, campaign, consent status, open and click events on our emails | Automatically, and from the ad or referral channel you came through |
We do not ask for and do not want special category data: health, racial or ethnic origin, political opinions, religion, trade union membership, genetic or biometric data, sexual orientation, or criminal records. Do not send it. If you do, we will delete it.
We also ask you not to submit personal data belonging to your own clients or third parties into our assignments, community posts or shared files. Where your work requires it, anonymize it first.
Some data is required to deliver the Services. If you do not provide your name, email and payment data, we cannot enroll you.
3. How We Use Your Data
We use personal data to:
- Review your application and decide whether we can help. Your business information tells us whether the Service fits your stage and market.
- Deliver the Services. Scheduling, giving access to lessons and the community, reviewing your assignments, running live sessions, producing Done-For-You deliverables.
- Take payment and keep accounts. Processing charges, installments and refunds, issuing invoices, chasing unpaid balances, and meeting tax and bookkeeping obligations.
- Support you. Answering questions, resolving problems, handling refund requests and disputes.
- Communicate with you. Service messages about your schedule, access and payments, and marketing about our programmes where you have agreed to receive it.
- Improve what we teach. Looking at anonymized patterns across cohorts to see which modules work, where people get stuck and what to change.
- Run and secure the Site. Keeping it working, preventing fraud and abuse, investigating security incidents, maintaining backups.
- Measure our marketing. Understanding which channels bring the right clients and how our content performs.
- Publish results, with permission. We use your name, company or results in a case study or testimonial only after you give separate written permission, which you can withdraw for future use at any time.
- Meet legal obligations and defend claims. Responding to lawful requests, keeping records we are required to keep, and establishing or defending legal claims.
We do not sell your personal data, and we do not share it with third parties for their own marketing.
4. Legal Bases (EEA and UK)
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases under the GDPR and UK GDPR.
| Purpose | Legal basis |
|---|---|
| Reviewing your application, delivering the Services, taking payment, supporting you | Performance of a contract, or steps at your request before entering one |
| Service messages about your schedule, access and payments | Performance of a contract |
| Marketing emails and messages | Consent, which you may withdraw at any time |
| Non-essential cookies, analytics and advertising pixels | Consent, given through our cookie banner |
| Improving the Services, securing the Site, preventing fraud, measuring our marketing | Legitimate interests in running and improving a viable business, balanced against your rights |
| Publishing your name or results in a case study | Consent, given separately in writing |
| Tax, accounting and other record-keeping; responding to lawful requests | Compliance with a legal obligation |
| Establishing, exercising or defending legal claims | Legitimate interests, or a legal obligation |
Where we rely on legitimate interests, you may object. We will stop unless we have compelling grounds that override your rights, or we need the data for legal claims. Where we rely on consent, withdrawing it does not affect processing carried out before you withdrew.
5. Cookies
We use cookies and similar technologies on the Site. Our Cookie Policy lists the specific cookies in use and forms part of this policy.
We use four categories:
- Strictly necessary cookies that make the Site work: page routing, security, load balancing, remembering your cookie choices. These run without consent because the Site cannot function without them.
- Preference cookies that remember your language choice between English and Russian.
- Analytics cookies that tell us which pages are visited and how people move through the Site.
- Advertising cookies and pixels that measure which campaigns bring applications and let us show ads to people who have visited the Site.
Analytics and advertising cookies are set only after you accept them in our cookie banner. You can change or withdraw your choice at any time through the cookie settings link in the Site footer, and you can block or delete cookies in your browser settings. Blocking strictly necessary cookies will break parts of the Site.
We honour the Global Privacy Control signal where your browser sends it, and treat it as an opt-out of targeted advertising and of any sharing of your data for that purpose.
6. Analytics and Advertising
With your consent, we use web analytics to understand how the Site is used: which pages are visited, how long people stay, where they arrive from and where they drop off. This is aggregate and statistical. We do not use it to build a profile of you as an individual.
With your consent, we also use advertising pixels from the platforms we advertise on. A pixel tells the platform that a browser visited a page or submitted an application, so we can measure which campaigns work and show ads to people who have already visited us. The platform may combine that signal with data it already holds about you under its own privacy policy, which we do not control.
You can opt out at any time by declining advertising cookies in our banner, changing your ad settings on the platform itself, or sending a Global Privacy Control signal.
We do not run ads on the Site, and no advertiser pays us to show you anything here.
7. Who We Share Data With
We share personal data with service providers who process it on our instructions, under written terms that require them to keep it confidential and use it only for us.
| What they do | Who | What they receive |
|---|---|---|
| Payment processing | Stripe | Name, email, billing address, card data entered directly with them, transaction records |
| Community, lessons and course delivery | Skool | Name, email, login identifier, progress, posts and comments |
| Live sessions | Our video conferencing provider | Name, email, your audio and video, chat messages, recordings and transcripts where enabled |
| Email and messaging | Our email and messenger providers | Name, email, phone number, message content, open and click events |
| Scheduling and forms | Our booking and form tools | Name, email, phone, answers you give in applications and assessments |
| Hosting, storage and file sharing | Our hosting and cloud storage providers | Anything stored on the Site or in shared project folders |
| Analytics and advertising | The platforms named in our Cookie Policy | Cookie identifiers, IP address, page and conversion events, subject to your consent |
| Accounting and tax | Our accountant and tax software | Transaction and invoice records |
| Contractors and mentors | Individuals engaged to deliver part of a Programme or a Done-For-You project | Only what they need for your engagement, under confidentiality terms |
We also disclose personal data where the law requires it: in response to a lawful request from a court, regulator or law enforcement, to comply with tax and reporting obligations, and to establish, exercise or defend legal claims, including in a payment dispute.
If Learn Factory LLC is involved in a merger, acquisition or sale of assets, personal data may transfer to the acquirer as part of that transaction. We will tell you before your data becomes subject to a different privacy policy.
Other participants in your cohort or the community see what you post there and what you say in group sessions. Treat the community as a professional space, not a private one.
8. International Transfers
We are based in the United States. Our systems and most of our service providers are in the United States. If you are outside the United States, your personal data is transferred to and processed there, and in other countries where our providers operate.
The United States does not have a general data protection law equivalent to the GDPR, and in some cases public authorities there may have access rights that differ from those in your country.
For transfers of personal data out of the EEA, the United Kingdom or Switzerland, we rely on the European Commission's Standard Contractual Clauses, with the UK Addendum where applicable, included in our agreements with providers. Where a provider is certified under the EU-US Data Privacy Framework and its UK and Swiss extensions, we may rely on that certification instead.
You can ask us for a copy of the safeguards that apply to a specific transfer by emailing support@learnfactory.org.
9. How Long We Keep Data
We keep personal data only as long as we need it for the purpose we collected it for, or as long as the law requires.
| Data | How long |
|---|---|
| Applications that did not convert | 24 months from your last contact with us |
| Client records: name, contact details, engagement history | 7 years after the engagement ends |
| Payment and invoice records | 7 years, to meet US tax and accounting requirements |
| Content you submitted during a Programme | 12 months after the Programme ends, unless you ask us to delete it sooner |
| Session recordings and transcripts | 12 months after the cohort ends |
| Community posts and comments | While your subscription is active, then 12 months |
| Marketing list data and consent records | Until you unsubscribe, then we keep a suppression record indefinitely so we do not email you again |
| Support and dispute correspondence | 3 years after the matter closes, or until any related claim is resolved |
| Website analytics and cookie data | Per the retention period listed in our Cookie Policy, typically no more than 14 months |
Where a legal claim, investigation or payment dispute is live, we keep the relevant data until it is resolved and any appeal period has passed.
When a retention period ends, we delete the data or irreversibly anonymize it so it can no longer identify you. Anonymized data may be kept indefinitely for statistics about our programmes.
10. Your Rights
To exercise any right below, email support@learnfactory.org from the address we hold for you, or tell us which account the request concerns. We respond within 30 days, or 45 days where a US state law allows an extension and the request is complex, and we will tell you if we need the extra time. We do not charge for this unless a request is manifestly unfounded or excessive. We may ask for enough information to confirm who you are; we will not use it for anything else.
If you are in the EEA, the UK or Switzerland, you have the right to: access the personal data we hold about you and get a copy; correct it if it is wrong or incomplete; have it deleted; restrict how we use it; object to processing based on legitimate interests; object to direct marketing at any time, with no exceptions; receive the data you gave us in a portable machine-readable format; and withdraw consent you previously gave.
If you are in California, under the CCPA as amended by the CPRA you have the right to know what personal information we collect, use, disclose and the categories of sources and recipients; to access a copy; to correct inaccurate information; to delete it; to limit the use of sensitive personal information; and to opt out of the sale or sharing of personal information. We do not sell personal information and have not done so in the preceding 12 months. We do not sell or share the personal information of anyone under 16. We will not discriminate against you for exercising these rights: no worse price, no reduced service.
The categories of personal information we have collected in the past 12 months are those listed in Section 2. The categories of recipients are those listed in Section 7. We disclose personal information to service providers for the business purposes described in Section 3.
If you are in Florida, the Digital Bill of Rights gives you rights to access, correct, delete and obtain a portable copy of your personal data, and to opt out of targeted advertising, the sale of personal data and profiling with legal or similarly significant effects, where it applies to us.
If you are in another US state with a comprehensive privacy law, including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and Montana, you have broadly the same rights: access, correction, deletion, portability, and opt-out of targeted advertising and sale.
Authorized agents. You may use an authorized agent to make a request on your behalf. We will ask for proof of their authority and may ask you to confirm it directly.
Appeals. If we refuse a request made under a US state privacy law, you may appeal by replying to our decision. We will respond in writing within 45 days explaining the outcome. If we deny the appeal, you may complain to your state attorney general.
Complaints elsewhere. If you are in the EEA, the UK or Switzerland, you may complain to your local data protection authority. We would rather you came to us first.
11. Marketing Communications
We send marketing emails and messages about our programmes, events and content only where you have given us your email or number for that purpose, or where you are an existing client and the message is about services like the ones you bought.
Every marketing email carries an unsubscribe link. To stop text messages, reply STOP. To stop everything, email support@learnfactory.org. We action opt-outs within 10 business days.
Consent to marketing is never a condition of buying anything. Opting out of marketing does not stop service messages about your schedule, access and payments, which are part of the Services and continue while your engagement is active.
We keep a record of when and how you gave consent, and a suppression record after you opt out, so that we do not contact you again by mistake. That suppression record is the one thing we keep rather than delete when you unsubscribe.
12. Security
We protect personal data with measures appropriate to a business of our size: encryption in transit, access limited to the people who need it, multi-factor authentication on our accounts, vetted service providers under written confidentiality terms, and prompt removal of access when a contractor's engagement ends.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If a breach affects your personal data and is likely to result in a risk to your rights, we will notify you and the relevant authority without undue delay, and within 72 hours of becoming aware of it where the GDPR or UK GDPR applies.
You play a part too. Keep your password for the community platform strong and private, do not share your login, and tell us immediately at support@learnfactory.org if you think someone else has access to your account.
We will never ask you for your password, a full card number or a one-time code by email or message. Any message that does is not from us.
13. Children
The Site and the Services are for business use by adults. They are not directed to children, and we do not knowingly collect personal data from anyone under 18.
If you believe a child has given us personal data, email support@learnfactory.org. We will delete it promptly.
We do not sell or share the personal information of anyone under 16, and we have no actual knowledge of doing so.
14. AI Tools and Automated Processing
We use AI tools in parts of our work: drafting, transcribing calls, summarizing notes, research and analysis. Where a tool processes your personal data, it is covered by the same service provider terms as any other processor, and it is listed in Section 7.
We do not use your personal data, your submitted content or session recordings to train third-party AI models, and our agreements with providers prohibit them from doing so.
We do not make decisions about you that produce legal or similarly significant effects based solely on automated processing. Decisions on applications, refunds and access are made by a person, who may use a tool to prepare information first.
AI output can be wrong. Anything we give you that affects your business is reviewed by a person before it reaches you, and you remain responsible for verifying what you act on.
15. Changes to This Policy
We update this policy when our practices, tools or legal obligations change. The current version is always at learnfactory.org, with the date it took effect at the top.
If a change materially affects how we use your personal data, we will tell you by email or a notice on the Site at least 14 days before it takes effect, and where the law requires consent for the change, we will ask for it rather than assume it.
Ask us for a copy of an earlier version at support@learnfactory.org and we will send it.
16. Contact
Learn Factory LLC
a Florida limited liability company
843 NE 211th St, Miami, FL 33179
United States
Privacy requests and questions: support@learnfactory.org
Website: learnfactory.org
Write to us first with any privacy concern. We answer within 30 days.
If you are not satisfied, you may complain to your state attorney general in the United States, or to your local data protection authority in the EEA, the United Kingdom or Switzerland.