Andrew Academy

Privacy Policy

Last updated: July 3, 2026

1. Data controller. The controller of your personal data is Andrew Academy, Goethestraße 58, 50968 Köln, Germany. Contact: support@andrewacademy.club.

2. Information we collect.

  • Account information: your email address and, if you provide it, your name.
  • Subscription & billing data: your plan (tier), billing cadence (monthly/yearly), renewal dates and payment status. Card payments are processed by Stripe — we receive limited billing details (such as billing country and the last digits/card brand) but never your full card number.
  • Support data: messages you send us by email or live chat, including your name, email and subscription tier when you are logged in.
  • Technical & usage data: IP address, browser type, device and operating system, pages visited, time on site and referral source, collected via cookies and analytics.

3. How we use your data and legal bases (GDPR).

  • Provide the service, your account and access to materials — performance of a contract.
  • Process payments, renewals and send transactional emails (login links, receipts, renewal reminders) — performance of a contract.
  • Provide customer support — performance of a contract / legitimate interests.
  • Prevent fraud, secure the site and improve our service — legitimate interests.
  • Comply with tax, accounting and other legal obligations — legal obligation.
  • Send you our member newsletter and updates about the Academy (new lessons, important announcements) — on the basis of our legitimate interest in keeping members informed about the service they subscribed to. When you become a member you are subscribed automatically; you can unsubscribe at any time via the link in every email, at no cost.

4. Service providers we share data with (processors). We do not sell or rent your personal data. We share it only with providers that help us operate, under appropriate agreements:

  • Stripe — payment processing.
  • Ghost (Ghost Foundation / Ghost Pro) — website hosting and membership management (stores your email, name and subscription status).
  • Microsoft Clarity — website analytics, including heatmaps and session replay, to understand how the site is used.
  • tawk.to — live chat; when you are logged in, your name, email and subscription tier may be shared with the chat so our team can assist you.
    We may also disclose data where required by law, or in connection with a merger, acquisition or sale of our business.

5. International transfers. Some of our providers (including Stripe, Microsoft and tawk.to) process data in the United States. Where personal data is transferred outside the EU/EEA, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework.

6. Cookies & analytics. We use cookies that are strictly necessary for the site and login to work, and analytics cookies (Microsoft Clarity) to understand and improve how the site is used. You can block or delete cookies through your browser settings, though some features may then not work properly. Where required by applicable law, we will ask for your consent before setting non-essential cookies.

7. Data retention. We keep your personal data only as long as necessary for the purposes above. Billing and transaction records are kept for 7 years for tax and accounting compliance. You may request earlier deletion, subject to our legal obligations.

Marketing communications. As a member, you receive our newsletter and service updates by email. Every email contains a one-click unsubscribe link. Unsubscribing does not affect essential transactional emails (login links, payment receipts and renewal reminders), which we must send to run your subscription.

8. Your rights. Depending on your location, you have the right to access, correct, delete or receive a copy of your data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email support@andrewacademy.club. If you are in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

9. Security. We use industry-standard measures to protect your data, including encrypted (SSL/TLS) transmission, access controls and PCI-compliant payment processing via Stripe. No method of transmission is 100% secure, but we work to protect your information.

10. Children. Our services are intended for adults. You must be at least 16 (or the age of digital consent in your country) to use the site, and at least 18 to purchase a subscription. We do not knowingly collect data from children below these ages.

11. Changes to this policy. We may update this Privacy Policy from time to time; changes are posted here with an updated "Last updated" date.

12. Contact. Andrew Academy, Goethestraße 58, 50968 Köln, Germany · support@andrewacademy.club.