01 Who we are
This website and the Top 1% Lighting Artist Program are operated by CG Foundry Corporation (“CG Foundry,” “we,” “us,” or “our”), a corporation incorporated in the State of Delaware, United States.
For any questions about this policy or your personal information, you can reach us using the details in the Contact us section below.
02 Information we collect
We collect information in three ways: information you give us directly, information collected automatically when you use the site, and information we receive from the service providers we work with.
Information you provide
- Identity and contact details — your name and email address when you sign up for our newsletter, register for a webinar, submit an enrollment form, or contact us.
- Billing and payment details — your billing name, address, and the payment information you enter at checkout. Card details are collected and processed directly by our payment processor (see Section 04); we do not store full card numbers on our systems.
- Enrollment information — the cohort or product you select and any responses you provide in an application or intake form.
- Community information — if you join our Discord community, your Discord username and the content you choose to share there.
- Communications — the messages, questions, and feedback you send us by email or through support channels.
Information collected automatically
- Device and usage data — your IP address, browser type, device type, operating system, the pages you view, and the dates and times of your visits.
- Referral data — the website, link, or campaign that brought you to us.
- Email engagement — whether you open our emails and click links within them, so we can understand what’s useful and improve our communications.
- Cookies and similar technologies — see Section 06 for details.
03 How we use your information
We use the information we collect to:
- Provide and deliver the Top 1% Lighting Artist Program and any other products or services you purchase.
- Process your payments and send you receipts, order confirmations, and enrollment details.
- Give you access to and administer our community spaces, such as Discord.
- Send you service-related communications about your enrollment, schedule, or account.
- Send you marketing and educational emails where you have signed up or otherwise consented to receive them. You can unsubscribe at any time using the link in every email.
- Respond to your questions, requests, and support inquiries.
- Understand how our site and offerings are used so we can measure performance and improve them.
- Protect the security of our site, prevent fraud, and enforce our terms.
- Comply with our legal, tax, and accounting obligations.
Where required by law (for example, in the EEA and UK), we rely on the following legal bases for processing: performing our contract with you, your consent (which you can withdraw at any time), our legitimate interests in operating and improving our business, and compliance with legal obligations.
04 The parties we share information with
We do not sell your personal information. We share it only with the service providers and parties listed below, and only to the extent needed for the purposes described in this policy. These providers are permitted to use your information solely to perform services for us and are bound by confidentiality and data protection obligations.
- Payment processing — Stripe. We use Stripe to process payments. When you make a purchase, your payment and card details are transmitted directly to Stripe, which handles them in accordance with its own privacy policy and the PCI DSS security standard. We receive confirmation of your payment and limited billing details, not your full card number.
- Email and marketing — Mailchimp. We use Mailchimp to manage our mailing lists and send transactional and marketing emails. Your name, email address, and engagement data are processed by Mailchimp on our behalf.
- Community platform — Discord. If you join our community, your interactions take place on Discord and are subject to Discord’s own privacy policy.
- Hosting and infrastructure. Our website and data are hosted with reputable cloud infrastructure providers (including Amazon Web Services) that store and serve information securely on our behalf.
- Analytics providers. We may use analytics services to understand how visitors use our site so we can improve it.
- Professional advisors. We may share information with our accountants, auditors, and legal advisors where necessary to run our business and meet our obligations.
- Legal and safety. We may disclose information where required by law, court order, or government request, or where necessary to protect our rights, your safety, or the safety of others.
- Business transfers. If CG Foundry is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.
How information is disclosed
Information is shared with these parties electronically, over secure and encrypted connections, under written agreements that limit how it may be used. We provide each provider only the information it needs to perform its specific function.
05 Data security
We take reasonable and appropriate measures to protect your personal information against loss, misuse, unauthorized access, disclosure, and alteration. These measures include:
- Encryption of data in transit using industry-standard TLS/HTTPS across our website.
- Reliance on a PCI DSS–compliant payment processor (Stripe) for all card transactions, so that sensitive payment data is never stored on our own systems.
- Working only with reputable infrastructure and service providers that maintain their own security safeguards.
- Limiting access to personal information to those who need it to operate the business.
No method of transmission or storage is completely secure, so while we work to protect your information, we cannot guarantee absolute security.
06 Cookies and tracking technologies
We use cookies and similar technologies to make our site work, remember your preferences, understand how the site is used, and measure the performance of our content. These generally fall into three categories:
- Essential cookies that are necessary for the site to function and for secure checkout.
- Analytics cookies that help us understand how visitors interact with the site.
- Marketing cookies that help us measure the effectiveness of our campaigns.
You can control or delete cookies through your browser settings. Disabling some cookies may affect how the site works. Where required by law, we will ask for your consent before placing non-essential cookies.
07 Data retention
We keep your personal information only for as long as necessary to fulfill the purposes described in this policy, including to provide the program you enrolled in, maintain our community, and meet our legal, tax, and accounting requirements. When information is no longer needed, we delete it or anonymize it. You can request deletion of your information as described in Section 09.
08 International data transfers
CG Foundry operates from the United States and Egypt, and the service providers we use may process data in the United States, the European Union, and other countries. This means your personal information may be transferred to, stored, and processed in countries outside your own, which may have different data protection laws.
Where we transfer personal information from the EEA or UK, we take steps to ensure it receives an adequate level of protection, including by relying on appropriate safeguards such as Standard Contractual Clauses where applicable.
09 Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you.
- Correction — ask us to correct information that is inaccurate or incomplete.
- Deletion — ask us to delete your personal information.
- Restriction and objection — ask us to limit or stop certain processing.
- Portability — request your information in a portable format.
- Withdraw consent — withdraw consent at any time where we rely on it, including by unsubscribing from marketing emails.
If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority.
If you are a California resident, you have the right to know what personal information we collect and how we use and share it, to request deletion or correction, and to not receive discriminatory treatment for exercising your rights. We do not sell personal information.
To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by applicable law and may need to verify your identity first.
10 Children’s privacy
Our website and services are intended for adults and are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
11 Third-party links
Our site may contain links to third-party websites and services that we do not operate or control. This policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policy of any third-party site you visit.
12 Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we do, we will revise the “Last updated” date at the top of this page. If we make material changes, we will provide a more prominent notice where appropriate. We encourage you to review this page periodically.
13 Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, you can reach us at: