Privacy Policy

PRIVACY POLICY

This Privacy Policy explains how LurnUp (“we,” “our,” “us”) collects, uses, and shares information when you visit our website and purchase our products. By using our site, you agree to the practices described here.

We comply with the General Data Protection Regulation (EU Regulation 2016/679 – “GDPR”), applicable Italian privacy law, and, where relevant, the California Consumer Privacy Act (CCPA/CPRA).

1. Data Controller

The data controller is LurnUp (operated by Salvatore Scala; P. Iva: IT01697960886). For any questions regarding the processing of your personal data, you can contact us at: info@lurnup.com.

2. Information We Collect

We may collect the following information:

  • Personal information you provide directly: such as name, email address, billing address, and payment details when purchasing products or signing up for our newsletter.
  • Transaction information: details of the purchases you make, processed securely through third-party providers (Stripe, PayPal).
  • Technical information: IP address, device type, browser, operating system, and usage data collected through cookies and similar technologies.
  • Communications: content of inquiries, customer support requests, or other messages you send us.

3. How We Use Your Information

We use your information to:

  • Process and deliver orders, including sending digital files (ebooks, guides, checklists).
  • Provide customer support and respond to your inquiries.
  • Send you transactional emails (order confirmations, updates, receipts).
  • Send you marketing communications only if you have opted in.
  • Monitor, analyze, and improve website performance and customer experience.
  • Comply with applicable legal, regulatory, or tax obligations.

4. Legal Basis for Processing (GDPR – Article 6)

We process personal data only where a lawful basis applies:

  • Contract performance: to provide and deliver purchased products.
  • Legal obligation: to comply with tax, accounting, and regulatory requirements.
  • Consent: for marketing communications or the use of non-essential cookies (including the Facebook Pixel).
  • Legitimate interest: to ensure website security, prevent fraud, improve services, and respond to user requests, provided your rights are not overridden.

5. Sharing of Information

We do not sell or rent your personal information. We may share your data only with:

  • Payment processors (Stripe, PayPal) to complete purchases.
  • Service providers (e.g., email delivery, analytics, hosting) who support our business operations and are bound by confidentiality agreements.
  • Marketing and advertising providers, including Meta (Facebook) Pixel, which help us measure ad conversions, optimize campaigns, build audiences, and deliver personalized ads. These providers may process technical identifiers such as IP address and browser data.
  • Affiliates or partners when you purchase third-party products promoted through our platform. In such cases, limited data necessary for fulfillment may be shared.
  • When required by law, or to enforce our Terms of Service and protect our rights, property, or safety.

6. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential website functionality (shopping cart, checkout).
  • Analytics (to understand site usage and improve content).
  • Marketing purposes, including the Meta (Facebook) Pixel.

Non-essential cookies (including analytics and marketing tools such as Facebook Pixel) are used only with your consent via our cookie banner/consent management platform. You can change your preferences at any time. For details, please see our Cookie Policy.

7. Data Security

We implement reasonable technical and organizational measures to protect your information. Sensitive payment details are encrypted and processed directly by Stripe and PayPal; we do not store credit card numbers on our servers.

8. Data Retention

We retain your personal information only as long as necessary to:

  • Fulfill the purposes described in this policy.
  • Comply with legal and tax obligations (up to 10 years for invoices and accounting records).
  • Resolve disputes and enforce agreements.

After this period, data is securely deleted or anonymized.

9. Provision of Data

Certain data (such as billing details and email address) are necessary to enter into and perform the contract (order, delivery of digital products) and to comply with legal obligations (invoicing/tax). If you do not provide such data, we may be unable to process your order or provide requested services.

10. Children’s Privacy

Our site and products are intended for adults and parents. We do not knowingly collect personal information from children under 14 in Italy and, generally, under the applicable digital consent age in the EU (14 in Italy; up to 16 in some Member States) and under 13 in the U.S. If you believe your child has provided us with personal information, please contact us and we will promptly delete it.

11. Your Rights (GDPR and CCPA/CPRA)

Under the GDPR, you may at any time:

  • Request access to, correction, or deletion of your personal data.
  • Request restriction of processing or object to processing (including direct marketing).
  • Request portability of your data in a structured, machine-readable format.
  • Withdraw your consent, where processing is based on consent.

To exercise your rights, contact us at info@lurnup.com. You also have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it) or another competent supervisory authority.

California Residents (CCPA/CPRA):

  • You have the right to know what personal information we collect and how we use it.
  • You may request deletion of your personal information.
  • You have the right to opt out of the sale or sharing of personal data. We do not sell personal data, but we may engage in cross-context behavioral advertising through tools such as the Facebook Pixel. You can opt out via our “Do Not Sell or Share My Personal Information” link, and we honor the Global Privacy Control (GPC) signal.
  • You have the right to non-discrimination for exercising your privacy rights.

12. International Data Transfers

We may transfer your information to service providers outside the European Economic Area (EEA), including the United States. Where such transfers occur, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission or the EU–US Data Privacy Framework, together with additional safeguards as required by law.

13. Automated Decision-Making

We do not make decisions producing legal or similarly significant effects based solely on automated processing, including profiling.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a new “Last Updated” date. We encourage you to review this page periodically.

15. Contact Us

For questions about this Privacy Policy, please contact us:

LurnUp
Email: info@lurnup.com

This Privacy Policy was last modified on the September 7, 2025 and is effective immediately.