Privacy Policy

Last updated: March 2, 2026

Keystone Arch Learning Co. (“Keystone Arch”, “we”, “us”) operates the website at education.acaimagia013.com and the learning studio at 4046 Parrish Avenue, Kerrville, TX 78028. This policy explains what personal information we collect, why, how long we keep it, and the choices you have. It is written to be read, not to be survived.

The data controller is Jodie Briganti, sole proprietor, contactable at webmaster@education.acaimagia013.com or 830-889-3387.

1. Information we collect

1.1 Information you give us

• Enquiries: name, email address, telephone number, the course you asked about and anything you choose to write in the message box.
• Enrolment: the above plus billing address, emergency contact if you request one, and any accessibility requirement you tell us about so we can meet it.
• Payment: we do not store card numbers. Card payments are processed by our payment provider; we receive only a confirmation, the last four digits and the amount.
• Coursework: files you upload or bring for classroom exercises. These stay on your own device or your own account wherever possible.

1.2 Information collected automatically

• Standard server logs: IP address, browser type, referring page, pages viewed, date and time. These are kept for 30 days for security and troubleshooting.
• Optional analytics, only if you accept them in the cookie banner. Analytics tell us which course pages are read; they are configured with IP anonymisation and are not used for advertising.

1.3 What we never collect

We do not ask for Social Security numbers, financial account credentials, health records, or any special-category data through this website. If a form on this site ever appears to ask for those, do not complete it and tell us immediately — it is not ours.

2. Why we use it, and the legal basis

• To answer your enquiry and enrol you — because you asked us to, and to perform our agreement with you.
• To run the course — registers, recordings access, certificates, and the cohort chat.
• To take payment and keep accounting records — to comply with tax and recordkeeping obligations under U.S. and Texas law.
• To improve the website and courses — on the basis of your analytics consent.
• To keep the site secure — our legitimate interest in preventing abuse.

We do not use your personal information for automated decision-making or profiling, and we do not build advertising audiences from it.

3. Marketing

If you enrol, we may email you about the next term. Every such email carries a one-click unsubscribe and we honour it immediately. We do not send text-message marketing. We do not buy, sell, rent or trade mailing lists. Asking a question does not put you on a list.

4. Sharing

We share personal information only with service providers who help us operate, and only to the extent they need it: our website host, our email provider, our payment processor, our video-conferencing provider for online classes, and our accountant. Each is bound by contract to protect the data and to use it for no other purpose.

We will also disclose information where the law requires it, for example a valid subpoena or court order, or to protect the safety of a person. If Keystone Arch is ever sold or transferred, student records would transfer with it and you would be told beforehand.

We do not sell personal information, and we have not done so in the preceding twelve months.

5. How long we keep it

• Unsuccessful enquiries: 12 months, then deleted.
• Student records and certificates: 7 years, so we can verify completion for employers.
• Financial and tax records: 7 years, as required.
• Class recordings: 90 days after the final session, then deleted.
• Server logs: 30 days.

6. Your rights and choices

Whoever you are and wherever you live, you may ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct anything inaccurate;
• delete information we no longer need to keep for legal or accounting reasons;
• stop marketing emails, or withdraw analytics consent at any time via cookie settings;
• receive your data in a portable format.

Texas residents, and residents of other U.S. states with comprehensive privacy statutes, have these rights under their state law; we extend the same rights to everyone rather than checking your address. Write to webmaster@education.acaimagia013.com and we will respond within 45 days. We will never charge you for exercising a right, and we will never treat you differently for doing so.

7. Children

Our courses are for adults aged 18 and over. We do not knowingly collect information from children under 13. If you believe a child has given us information, contact us and we will delete it promptly.

8. Security

The site is served over HTTPS. Access to student records is limited to the owner and the two staff who need it, protected by two-factor authentication. Paper enrolment forms are held in a locked cabinet at the studio and shredded at the end of the retention period. No system is perfect; if a breach ever affected your information we would tell you and the relevant authorities as required by law.

9. Third-party links

Pages such as our resources page link to official government sites. Their privacy practices are their own and this policy does not cover them.

10. Changes

If we change this policy we will update the date at the top and, for material changes, tell enrolled students by email. Previous versions are available on request.