1. Who is responsible for your data
The controller of the data we collect on safa-studios.com is Juan Carlos Pereyda Villa, a sole proprietor registered in Mexico (tax ID PEVJ850228R19), operating under the trade names Safa Studios and Excellence University. Registered address: Valle de la Luna 2, Zibatá, El Marqués, Querétaro, 76269, Mexico. For any privacy matter write to hola@safa-studios.com. We have not appointed a Data Protection Officer because we are not required to.
2. What we collect
- Contact and account data: name, email, profession, city, date of birth and the username you choose for the campus.
- Purchase data: which program you bought, the billing record, and the last digits and type of your payment method. We do not store full card numbers: they never pass through our servers.
- Learning activity: course progress, submissions, session attendance and certificates. Generated on the Excellence University campus.
- Attribution: where you arrived from, the campaign, the event and the language, so we understand what works. Before you identify yourself we use a session identifier, not device fingerprinting.
- Technical data: IP address, browser and device information, and the country the request came from, which we use to show you the right currency.
3. What we use it for
- to provide, operate and improve the service;
- to process payments, renewals and refunds;
- to enrol you on the campus and deliver the program you bought;
- to communicate with you about your account, your charges and your support questions;
- to send you commercial communications where permitted, which you can opt out of at any time;
- to maintain security, prevent fraud and meet legal obligations.
We keep service email separate from marketing email. Service email, such as your payment receipt or a notice that your card failed, is sent because it is part of the contract and does not depend on your marketing consent.
4. Legal bases
Where a data protection law such as the GDPR applies, we rely on: performance of the contract with you to provide the service, your consent for optional communications and certain cookies, our legitimate interest in operating and securing the service, and compliance with legal obligations.
5. Who we share it with
We share data with trusted providers who process it on our behalf, under contract:
- Payments: Stripe. Processes your payment and may present it in your local currency. We never receive or store your full card details.
- Hosting: Vercel. Application hosting and content delivery network.
- Campus: Supabase. Authentication and database for the learning environment.
- Email: Resend. Transactional email, such as your enrolment confirmation or the link to manage your membership.
- AI providers: Anthropic. Powers the campus AI mentor. Your conversations with the mentor are sent to Anthropic to generate the response.
We do not sell your personal data.
6. International transfers
Because we operate internationally, your data may be transferred to and processed in countries other than your own. Where required, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses. Our providers process data mainly in the United States and the European Union. We are established in Mexico, a country the European Commission has not found to provide an adequate level of protection, so transfers to us rely on those safeguards.
7. How long we keep it
We keep your data while your account is active and for as long as we need it to provide the service, and afterwards for the periods required by legal, accounting and tax obligations. In practice: account and learning records are kept while your account is active and for 12 months after it closes; billing records are kept for 5 years under Mexican tax requirements; support correspondence for 24 months; AI mentor conversations for 12 months.
8. Your rights
Depending on where you live, you may have the right to access, rectify, erase, port or restrict the processing of your data, to object to certain processing, and to withdraw your consent. In Mexico these are the ARCO rights. To exercise them, write to hola@safa-studios.com. You also have the right to complain to your data protection authority: in Mexico, the federal authority responsible for transparency and data protection; in the European Union, the supervisory authority of the country where you live.
9. Cookies
On safa-studios.com we use only what is strictly necessary for the site to work and to remember the attribution of your visit. We do not use advertising or third-party analytics cookies, which is why you will not see a consent banner. If we add analytics or marketing later, we will ask for your consent first.
10. Children
The service is not directed at anyone under 18 and we do not knowingly collect their data. If you believe a minor has given us data, write to us and we will delete it.
11. Security
We use technical and organisational measures designed to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
12. Changes to this notice
We may update this notice. If we make material changes we will give reasonable notice. The last updated date appears at the top of this page.
13. Contact
Privacy questions: hola@safa-studios.com. Or by post to Valle de la Luna 2, Zibatá, El Marqués, Querétaro, 76269, Mexico.