Privacy Policy.

Creative Streaks Masterclass ("CS Masterclass," "we," "us," "our") is a programme operated by JOPStudios ("JOPStudios," "the Company"), a creative studio based in Toronto, Canada. This Privacy Policy explains what personal information we collect when you visit cs.jopstudios.co or interact with us, how we use it, and the rights you have over it.

We've written this in plain language. If anything is unclear, email privacy@jopstudios.co and a human will reply within 5 business days.

1. The short version

• We collect only what we need to deliver the masterclass and run the website.

• We never sell your personal information.

• We use trusted processors — Stripe, Resend, GoHighLevel, Google Analytics, Meta — under data-processing agreements.

• You can request a copy of your data, correct it, or delete it at any time.

2. Who we are (data controller)

JOPStudios, Toronto, Ontario, Canada. Email: privacy@jopstudios.co. The website operator is the same legal entity.

3. What information we collect

3.1 Information you give us directly

• Registration & checkout: first name, last name, email, phone (optional), billing address, partial payment-card details (handled by Stripe — we never see your full card number).

• Consultation booking: first name, email, optional notes about your goals.

• Waitlist + newsletter: first name, email, which workshop track you're interested in.

• Customer support: any information you choose to share when you email or message us.

3.2 Information collected automatically

• Device & usage: IP address, browser, device type, pages viewed, referring URL, time on page.

• Cookies & similar: see Section 8.

• Analytics: Google Analytics 4 + Meta Pixel + Meta Conversions API (server-side) for ad attribution.

3.3 Workshop-day media

We may photograph or film parts of the in-person workshops for our own marketing and educational use. Attendees are notified at the door and can opt out — see Section 11 (Model Release).

4. How we use your information (legal bases)

• Performance of contract — to deliver the workshop you registered for, send confirmations, and provide post-workshop materials.

• Legitimate interests — to run, improve, and secure the site; analyse aggregated usage; prevent fraud.

• Consent — for marketing emails, ad pixels, and non-essential cookies (you can withdraw consent at any time).

• Legal obligation — tax records, accounting, responding to lawful requests.

5. Sub-processors we use

• Stripe (USA / Ireland) — payment processing.

• GoHighLevel (USA) — calendar booking, forms, CRM.

• Resend (USA) — transactional email.

• ConvertKit (USA) — marketing email and drip sequences.

• Mux or Wistia (USA) — video hosting.

• Google Analytics 4 (USA / EU) — analytics.

• Meta (USA / EU) — Pixel + Conversions API for ad attribution.

• Vercel (USA / global) — hosting and CDN.

• Neon or Supabase (USA / EU) — application database for registrations and waitlist.

• Sentry (USA) — error tracking.

Each is bound by a data-processing agreement. Cross-border transfers (e.g. Canada → USA) rely on Standard Contractual Clauses or equivalent safeguards.

6. How long we keep data

• Registration & payment records: 7 years (Canadian tax law).

• Marketing list: until you unsubscribe.

• Waitlist & consultation enquiries: 24 months from last interaction.

• Analytics: aggregated and retained per Google's defaults (currently 14 months for event data).

7. Your rights

You can at any time: (a) ask for a copy of the data we hold on you, (b) ask us to correct it, (c) ask us to delete it (subject to legal retention obligations), (d) ask us to stop sending marketing, (e) withdraw consent for tracking cookies, (f) lodge a complaint with the Office of the Privacy Commissioner of Canada (or your local data-protection authority). Email privacy@jopstudios.co — we'll respond within 30 days.

8. Cookies & similar technologies

We use a small set of cookies and pixel tags:

• Strictly necessary — to let the site work (always on).

• Analytics — Google Analytics 4 (turned on only after consent on first visit).

• Marketing — Meta Pixel + Google Ads tag (consent-based).

You can change consent at any time via the "Cookie preferences" link in the footer.

9. SMS / WhatsApp consent

If you opt into SMS or WhatsApp updates (via the consultation form or the registration confirmation), we collect and process your phone number under your express consent. You can opt out at any time by replying STOP. Standard messaging rates from your carrier may apply.

10. Children

The masterclass is for people aged 18+. We don't knowingly collect data from anyone under 18. If you believe we have, email us and we'll delete it.

11. Workshop-day photo & video release

By attending an in-person workshop you grant CS Masterclass / JOPStudios a non-exclusive, royalty-free licence to use photographs and video footage of the workshop in marketing, social, and educational contexts (website, Instagram, YouTube, ad creative). If you'd prefer not to appear in any released material, tell us before the start of Day 1 and we'll respect that — easy to do, no questions asked.

12. Security

We protect your data with TLS in transit, encryption at rest, role-based access controls, audit logging, and regular vendor reviews. Card data is handled by Stripe (PCI Level-1) — we never store full card numbers.

13. International users

The site is operated from Canada. If you visit from outside Canada, you understand your data will be transferred to and processed in Canada and the United States, both of which may have different privacy laws than your home jurisdiction.

14. Changes to this policy

If we make material changes, we'll email registered users + post the change here with a new "Last updated" date. Minor edits (typos, formatting) are made silently.

15. Contact

Privacy questions: privacy@jopstudios.co. General: hello@jopstudios.co.