Privacy Policy

Effective Date: September 5, 2018
Last Updated: July 20, 2026

Worship Guitar Academy ("Worship Guitar Academy," "WGA," "we," "us," or "our") is a guitar education and training site operated by Merandian LLC, a limited liability company. This Privacy Policy describes what information we collect, how we use it, and your rights with respect to it. By using our website at worshipguitaracademy.com (the "Service"), you agree to the practices described in this policy.

Contact: info@worshipguitaracademy.com

Collection of your personal information

When you browse our website (no account required)

You may visit our website without creating an account. When you do, we collect limited information about your visit for two purposes:

• Analytics — such as the pages viewed, the order and time spent on them, how your visit arrived (for example, a search engine or link), and the general location (country and, in some cases, region) your visit originates from. Each visit is assigned a new, non-persistent identifier that is not shared with third parties and is not used to link separate visits together. This information is tied to your browsing session, not to you as an individual, and we do not use it to build a profile of you across visits or devices.
• Security — separately from analytics, we log limited technical information, including IP address, to detect and prevent bots, fraud, and abuse and to keep the site secure and available. This information is kept separate from analytics data, is non-identifying, is never tied to a particular visit, is used strictly for security purposes, and is not used for advertising or profiling.

Our website analytics and security logging are performed in-house.

We do not use persistent cookies to track you across sessions, and we do not respond to browser Do Not Track (DNT) signals because we do not track users across other websites or services.

When you create an account

To access our free and paid courses and products, you must create an account. We collect:

• Email address — used for account authentication and transactional emails such as sign-in verification codes. Your email is never visible to other users of the Service.

When you use the Service

Once you have an account, we collect the minimum data needed to operate the Service:

• Session data — when you sign in, we store a session token in a first-party browser cookie. This cookie is used solely to keep you signed in and grant access to content you've purchased. It is not used for tracking, advertising, or analytics.

If you purchase Worship Guitar Academy's products and services, our payment processor Stripe collects billing and payment information directly. We do not receive or store your payment details. We record that your purchase was successful, the product purchased, and the date of purchase — so we can deliver your purchased content to you through our Service.

Information we do not collect

Our systems are not designed to collect:

• Age, date of birth, or demographic information
• Cross-site tracking data or advertising identifiers Our third-party service providers may collect additional data as part of their own operations, as described in the Sharing your information section below.

We do not use third-party analytics, advertising networks, or tracking SDKs.

How we use your information

Worship Guitar Academy collects and uses your personal information to operate its website and to provide, maintain, deliver, and improve the Service. Specifically:

• Website analytics and security data — to understand how visitors use the site and to protect it from bots, fraud, and abuse. Security data is kept separate from analytics data and is used strictly for security purposes.
• Email address — to authenticate your account, send sign-in verification codes, and notify you of material changes to this policy or our Terms of Service.
• Purchase record — to verify which products and courses you have purchased and to deliver that content to you.
• Session cookie — to keep you signed in during your visit and grant access to content you've purchased.

We do not use any of your information to serve advertisements from outside our Service, build behavioral profiles, or sell data to any third party.

From time to time, Worship Guitar Academy may contact you via email for the purpose of providing announcements, service updates, or other communication in regards to your continued use of the Service. If you would like to stop receiving marketing or promotional communications via email, you may opt out in your account dashboard by unsubscribing or emailing info@worshipguitaracademy.com.

Legal basis for processing your data

We process your data on the following legal bases:

• Contractual necessity — processing your email address, purchase record, and session data is required to provide the Service you signed up for.
• Legitimate interests — operating and securing the Service, delivering products and courses you purchased, and preventing abuse, where those interests are not overridden by your rights.
• Consent — for optional features such as email notifications, where we rely on your consent, which you may withdraw at any time by contacting us or unsubscribing. Your rights under the privacy law that applies where you live are described in the Your rights and choices section below.

How we store your data

All data is transmitted over encrypted connections (HTTPS/TLS) and stored encrypted at rest in our database. Website security data, including IP address, is stored separately from other data and is used only for the security purposes described above.

Sharing your information

We do not sell, rent, or trade your information. We do not share your information with advertisers, data brokers, or marketers.

We may share limited information in the following circumstances:

Third-party service providers

We use a small number of trusted third-party providers to operate the Service. Each receives only the data necessary for their specific function, under its own privacy policy:

• Database and authentication providers — store your email address and purchase record on our behalf. We configure our infrastructure to use United States-based server regions; however, these providers operate their own global infrastructure and may store or process data on any of their servers in accordance with their own policies.
• Website hosting providers — host our public website. These providers may log access requests, which may include IP addresses, browser type, and pages visited, according to their own privacy policies.
• Email delivery providers — process your email address to send sign-in verification codes. They may retain delivery logs according to their own privacy policies.
• Payment processors — process your payment method directly when you purchase a product. We receive only a record that the transaction succeeded and what was purchased. They may retain transaction history according to their own privacy policies.

Our website analytics and security logging are performed in-house, not through a third-party analytics service.

Legal requirements and protection of rights

We may disclose information if we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, court order, or other legal process;
• Enforce our Terms of Service or investigate potential violations;
• Protect the security or integrity of the Service;
• Protect the rights, property, or safety of Merandian LLC, our users, or the public.

We will notify affected users of legal demands for their data when permitted by law and when we believe doing so is appropriate.

Business transfers

If Merandian LLC is involved in a merger, acquisition, asset sale, or similar transaction, your information may be transferred as part of that transaction. We will notify you of any such change via email or a prominent notice within the Service before your information becomes subject to a different privacy policy.

Session cookie

When you sign in, our authentication provider sets a first-party session cookie in your browser. This cookie:

• Contains a signed session token used to verify you are signed in
• Is scoped to worshipguitaracademy.com and is not readable by third parties
• Is not used for advertising, analytics, or tracking across websites
• Expires when your session ends or when you sign out

Because this cookie is required to keep you signed in, you cannot use authenticated features of the Service without it.

Data retention

We retain your information for as long as your account is active or as needed to provide the Service.

• Email address and account data — retained until you delete your account, at which point it is permanently removed.
• Purchase records — retained for as long as your account is active to ensure continued access to purchased content, and for a reasonable period after account deletion as required by our legal and tax obligations.
• Session cookies — expire at the end of your session or upon sign-out.
• Website security data — retained for a limited period for security purposes.

When you delete your account, we permanently delete your email address and all associated account data from our systems.

Your rights and choices

Access and portability

You may access a copy of your data, update your email address, or delete your account at any time by contacting us at info@worshipguitaracademy.com. Upon deletion, we permanently remove your email address and all associated account data as described in "Data retention" above.

Depending on where you live, you may have rights to access, correct, delete, port, or object to the processing of your personal data, or to withdraw consent, and to be free from discrimination for exercising those rights. To exercise any right, contact us at info@worshipguitaracademy.com. We do not sell, share, or use your data for advertising or profiling, so there is no action required on your part to opt out.

• EEA, UK, and Switzerland: you may access, correct, delete, export, or object to our processing of your data, and lodge a complaint with your local data protection authority.
• Canada: you may access and correct your data and withdraw consent; residents of Quebec have additional rights, including data portability and disclosure of any automated decision-making.
• Brazil: you may access, correct, delete, and port your data, and revoke consent at any time.
• Australia: you may access and correct your data; if a concern is unresolved, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
• California: you may know what we collect, request deletion, and opt out of any sale of personal information. We do not sell personal information, so the opt-out right has no practical application here.
• Other US states with applicable consumer privacy laws: you may access, correct, delete, and obtain a portable copy of your data, and opt out of any sale. We do not sell personal data and will not discriminate against you for exercising these rights.

Security

We protect your information through multiple layers:

• Encrypted storage: all data stored on our servers is encrypted at rest.
• Encrypted transit: all connections between your device and our servers use TLS.
• Access controls: we implement database-level access controls to ensure you can only access your own data.
• Minimal collection: we only collect the data needed to provide our Service.

No security system is impenetrable. We take reasonable and industry-standard precautions, but we cannot guarantee absolute security.

Children's privacy

We do not knowingly collect age or date of birth, and the Service is not designed to request or store such information. We have no means of verifying the age of users. The Service is not directed to children under the minimum age required in your jurisdiction. By creating an account, you represent and warrant that you meet the applicable minimum age and agree to be bound by this Privacy Policy and our Terms of Service.

It is the sole responsibility of parents and guardians to monitor and control their children's use of the Service. If we become aware that we have collected personal information from a child under the applicable age without parental consent or a user does not meet the applicable minimum age, we may delete the account and all associated data without notice.

International users

Our Service is operated by Merandian LLC from the United States. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer and processing.

For users in the European Economic Area, United Kingdom, and Switzerland: we process your data on the bases described in this policy, including our legitimate interests in operating and securing the Service.

Our third-party service providers may transfer, store, or process data on infrastructure located outside of the United States as part of their own operations, governed by their own privacy policies and data processing commitments. We comply with applicable data protection laws in the jurisdictions where we operate.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page and append a summary of changes in the Change Log section below. For material changes that affect how we handle your personal information, we will make reasonable efforts to notify users with accounts before the changes take effect.

Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy. If you do not agree with any changes, you should stop using the Service and delete your account before the changes take effect.

Feedback and information

Any feedback you provide through the Service is considered non-confidential, and we may use it without restriction or obligation to you.

The information contained in this website is subject to change without notice.

Email: info@worshipguitaracademy.com

Effective Date: September 5, 2018
Last Updated: July 20, 2026

Change log

July 20, 2026 - Disclosed first-party website analytics and security data collection, including IP address for security purposes, which are kept separate from analytics and used strictly for security. Standardized policy structure and language.

July 7, 2026 - Clarified that we collect limited and non-identifying first-party analytics on website visits, and no longer state that cookies are the reason we don't respond to Do Not Track signals.

June 14, 2026 - Updated email address.

June 11, 2026 - Removed overly specific language for select international countries that is covered elsewhere in this policy.

June 9, 2026 - Rewrote to accurately reflect actual data collection: email address, purchase record, and session cookie only. Removed "automatically collected information" section. Replaced analytic cookie details with accurate description of account session cookie. Removed inapplicable boilerplate (sweepstakes, postal mail, device-side encryption). Clarified Vercel and Stripe data handling.

May 20, 2026 - Removed Hotjar analytics. General update to policy to remove demographic tracking, reduce the scope of data collected, and provide cleaner language.

September 5, 2018 - Original publish date.