PUBLIC LEGAL INFORMATION

Privacy Policy

How Visual Arts Education collects, uses, stores and protects personal information.

Website text reviewed: 26 September 2026 · Under continuing review

Send a privacy request through the website Message form

1. About this policy

Visual Arts Education is responsible for the personal information it collects through this website. This policy explains our practices and is intended to support fair and transparent handling of personal data, including responsibilities under Jamaica’s Data Protection Act, 2020 where applicable.

2. Information we may collect

We may collect account and identity details such as name, email address, institution and profile image; membership and course records; lesson progress, assignments, artwork and other uploads; purchase, token, receipt and transaction references; communications; and technical or session information needed to operate and secure the website. Payment credentials are handled by approved third-party providers and should never be entered into ordinary website forms.

3. How information is used

Information is used to create and administer accounts, deliver courses and member services, review submissions, process or verify purchases, communicate service information, prevent abuse, maintain security, meet legal obligations and improve website operation. We will not use personal information for an unrelated purpose without an appropriate basis or notice.

4. Children and learners

Learners should use the website with appropriate parent, guardian, school or educator involvement where required by age, school policy or law. Adults responsible for a learner should avoid submitting more personal information than is needed for the educational activity.

5. Sharing and service providers

Information may be shared with hosting, authentication, storage, communications and payment providers only as needed to provide the service. It may also be disclosed where required by law, to protect rights or safety, or in connection with an authorized business or service transition. Providers may process information in other countries, subject to appropriate safeguards and their terms. We do not sell personal information.

6. Cookies, local storage and sessions

The website may use essential cookies, browser storage or similar technologies for authentication, preferences, security and service operation. Blocking essential technologies may prevent account or course features from working.

7. Security and retention

We use reasonable administrative and technical measures designed to protect information. No online system can guarantee absolute security. Information is retained only for as long as reasonably necessary for the stated purpose, legitimate administration, dispute resolution, security or legal obligations, then deleted or anonymized where practicable.

8. Your choices and rights

Subject to applicable law, you may ask to access or correct your personal information, request deletion or restriction, object to certain processing, or ask questions about how it is used. Some records may need to be retained for legal, security or transaction purposes. Requests can be made through the website administrator or contact channel, and identity may need to be verified.

9. Third-party links

External services and payment pages have their own privacy practices. Review their policies before providing information. Visual Arts Education does not control independent third-party websites.

10. Updates and contact

We may update this policy as the website or legal requirements change. The current version and effective date will remain on this page. Privacy questions or requests can be sent through the website’s administrator or contact channel.

11. Optimization, offline copies and delivery providers

Eligible images may be converted to a smaller high-quality format before upload. File fingerprints may be used to detect identical uploads without interpreting their content. Previously opened pages and authorized resources may be stored in the browser cache for offline use. A signed-in user should clear website data on a shared device. If an external storage or content-delivery provider is activated, it will process file delivery only as needed for that service and under the applicable provider terms.

12. Development queue, assignment previews and audit backups

Administrator-only development requests, assignment previews, system events and checksum-protected audit snapshots may be processed and retained to operate, review, secure and recover the website. Assignment files remain protected by administrator authentication. API keys and provider secrets must be stored only as protected server-side secrets; they must not be entered into public content, normal database fields or ordinary website forms.

13. Public pages and user choices

Material selected for a public page, public document listing, personal display store, comment area or shared link may be visible to anyone. Review visibility and download settings before publishing. Private assignments and profiles are intended for the signed-in member and authorized administration unless a separate publication choice is made.

14. Security records and incidents

We may record sign-in attempts, administrative changes, uploads, account actions, network identifiers and related security events to prevent abuse and investigate suspected unauthorized activity. Where an incident creates a legal notification duty, reasonable steps will be taken consistent with applicable law and available contact information.

15. Certificate, payment and token records

When a visitor or member requests an uploaded product, the website may store the item identifier, permanent token code, certificate and barcode reference, selected payment method, currency calculation, quoted rate, token amount, order status, member identifier and administrator processing history. These records support verification, receipts, pickup, authorized downloads, dispute review and fraud prevention.

16. Private course learning records

For protected courses, the website may record enrollment, verified transaction status, lesson and handout access, assessment activity, assignment submissions and administrator feedback. These records are used to deliver member access, preserve learning progress, review assessments, prevent unauthorized distribution and resolve access questions.

17. Course documents and assessment submissions

Private course delivery may include videos, Word files, PDFs, images, printable handouts and assessment records. Access and download activity may be connected to the member account and verified transaction. Learners should not place personal customer lists, advertising credentials, payment details or confidential third-party information in course submissions.

18. Development requests and collaborator records

Questions selected for technical review may be copied into a protected administrator development queue with their source-message reference. The queue may also contain coder names, specialties, internal contact references, implementation notes, tests and audit records. Access is limited to authorized administration and connected development providers required to perform the service. Do not place passwords, private keys or payment credentials in development requests.

19. External-provider connection records

The website may store non-secret administration records for an external service, including the provider name, related website section, manual enabled or paused setting, selected connection stage, update time and authorized administrator action. Provider passwords, API keys, access tokens and other secret values are not collected by these controls and must not be stored in ordinary website or database fields. Authentication occurs on the provider’s own service, and any credentials needed by the website must be placed only in an approved encrypted server-side secret manager.

20. Member publication permission and privacy contact

Member cards are private by default. A public card may show an image, display name, public code, Website Token holding and purchase rank only after the administrator records specific member or responsible-guardian permission. To ask about your data, request correction or removal, use the Message option at the bottom of this page and state that it is a privacy request.