Privacy Policy

Effective Date: September 8, 2025
Last Updated: September 8, 2025

This Privacy Policy explains how Nashville Artist Development University LLC ("NADU," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit or make purchases from nadu.thinkific.com or otherwise use our services (the "Service").

1. Information We Collect

We collect information you provide directly and information collected automatically.

A. Information You Provide

• Account information: name, email, username, password, profile information.

• Payment and billing information: payment card details and billing address (processed by third-party payment processors; we do not store full card numbers).

• User Content: text, audio, video, comments, messages, and other materials you submit.

• Communications: correspondence with support or instructors.

B. Information Collected Automatically

• Usage data: pages visited, time spent, clicks, course progress, device information, browser type, IP address.

• Cookies and similar technologies: session cookies, persistent cookies, local storage, pixel tags.

2. How We Use Your Information

We use personal information for purposes including:

• Providing, maintaining, and improving the Service and course delivery;

• Processing payments and refunds;

• Communicating about your account, courses, and support;

• Personalizing content and learning recommendations;

• Analytics, research, and product development;

• Fraud prevention, security, and compliance;

• Marketing and promotional communications (with your consent where required).

3. Legal Bases for Processing (EU/EEA)

If you are in the EU/EEA, our legal bases include:

• Performance of a contract: to provide the Service and process payments.

• Legitimate interests: to improve the Service, security, and prevent fraud (balanced against your rights).

• Consent: for optional marketing emails and targeted advertising where required.

• Legal obligation: to comply with law.

4. Sharing and Disclosure

We may share personal information with:

• Service providers and processors: Thinkific (course hosting), Stripe/PayPal (payments), email providers, analytics providers, and other vendors who process data on our behalf.

• Legal and safety: to comply with law, respond to legal process, enforce Terms, or protect rights, safety, or property.

• Business transfers: in connection with mergers, asset sales, or reorganizations (with notice).

• With your consent.

5. Third-Party Services

Third parties accessed through links or integrations may collect data. Their policies apply. We recommend reviewing their privacy policies. For Thinkific’s privacy information, see Thinkific’s privacy policy; for Stripe and PayPal, see their respective privacy and security documentation.

6. Cookies, Tracking, and Targeted Advertising

We and our third-party partners use cookies and tracking technologies to operate and personalize the Service, analyze use, and deliver targeted ads. You can manage cookie preferences via your browser and the cookie banner on our site. For targeted advertising opt-outs, see industry opt-out tools such as the Digital Advertising Alliance.

7. Data Retention

We retain personal data as long as necessary to provide the Service and fulfill legitimate business and legal purposes. For example:

• Account and transactional data: retained while your account is active and for a commercial reasonable period (e.g., up to 2 years) after account closure for recordkeeping and fraud prevention unless law requires longer retention.

• User Content: retained while you maintain your account and after as reasonable for backup, legal compliance, or recordkeeping.

(You should update retention periods to match your business practices and legal requirements.)

8. Data Subject Rights (EU, UK, CA, and other regions)

Depending on your jurisdiction you may have rights to:

• Access, correct, or delete your personal data;

• Restrict or object to processing;

• Data portability;

• Withdraw consent (where consent was the basis);

• Opt-out of sale of personal information (California).
  To exercise these rights, contact [email protected]. We may require verification and will respond according to applicable timelines.

9. Children’s Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13 in a way that violates applicable law, we will take steps to delete the information. For persons in jurisdictions with a higher age of consent, we comply with applicable local law.

10. International Transfers

Your data may be transferred to and processed in the United States or other countries where our service providers operate. We will take steps to ensure appropriate safeguards are in place as required by law.

11. Security

We implement reasonable technical and organizational measures to protect personal data. However, no method of transmission or electronic storage is completely secure. We cannot guarantee absolute security.

12. Changes to this Policy

We may modify this Privacy Policy at any time. We will post the updated policy with a new "Last Updated" date. Continued use after changes means you accept the updated policy.

13. How to Opt-Out of Marketing Communications

You may opt out of promotional emails by clicking the unsubscribe link in any marketing email or by contacting [email protected]. Even if you opt out, we will still send you transactional or service-related communications.

14. California Privacy (CCPA/CPRA)

If you are a California resident, you may have rights to access, delete, and opt-out of sale/sharing of your personal information. To exercise those rights, contact [email protected]. We do not knowingly sell personal information of minors under 16 without opt-in consent.

15. Contact & Data Requests

For privacy questions, to exercise rights, or to make requests, contact:
Email: [email protected]

16. Additional Information for EU/UK Residents

If you are in the EU/UK and have a privacy concern you may contact the applicable supervisory authority. If cross-border transfers require additional safeguards, we will maintain appropriate contractual protections with processors.