Privacy Policy

1. Who We Are

This Privacy Policy explains how XRForgeHub, operating as XRForgeHub Culinary Studio ("XRForgeHub," "we," "us," or "our"), collects, uses, discloses, and protects personal data when you visit xrforgehub.com (the "Site") or use our cooking courses, coaching, and related services (the "Services").

Registered address: 5th Topolnyi Lane, 6, Lviv, Lviv Oblast, 79000, Ukraine. Company registration number: 14678901. For any privacy-related question or request, contact us at info@xrforgehub.com.

2. Information We Collect

2.1 Information You Provide Directly

• Contact details submitted through our forms: full name, email address, phone number.
• Course preferences and any message content you choose to share with us.
• Payment and billing information when you purchase a course or subscription (processed by our third-party payment processor — we do not store full card numbers).
• Any correspondence you send us by email or through the contact form.

2.2 Information Collected Automatically

• Device and browser information (browser type, operating system, screen size).
• IP address and approximate location (city/region level).
• Pages visited, time spent on the Site, referring/exit pages, and click activity.
• Cookie identifiers and similar technologies as described in Section 4.

3. How We Use Your Information

We use the information described above to:

• Respond to consultation requests and contact form submissions.
• Provide, operate, and maintain our courses and coaching services.
• Process payments and manage course enrollment.
• Send confirmations, scheduling updates, and service-related communications.
• Measure and improve Site performance and content through analytics.
• Measure the effectiveness of our advertising campaigns, including Google Ads, and — where you have consented — personalize ads.
• Comply with legal obligations and enforce our Terms of Service.

4. Cookies & Consent Management (Google Consent Mode v2)

Our Site uses cookies and similar technologies. When you first visit, a consent banner asks you to accept or reject non-essential cookies. We use Google Consent Mode v2, which means:

• Before you make a choice, all advertising and analytics cookies default to "denied" — no advertising or analytics data is sent to Google.
• If you click "Accept all," consent is updated to "granted" for analytics and advertising cookies, and your choice is remembered for future visits.
• If you click "Reject non-essential," only strictly necessary cookies are used.
• You can change your choice at any time by clearing your browser's local storage for this Site and reloading the page, or by using your browser's cookie settings.

4.1 Categories of Cookies We Use

• Strictly necessary: required for core Site functionality (e.g., remembering your cookie choice). These cannot be disabled and do not require consent.
• Analytics: help us understand how visitors use the Site (e.g., Google Analytics). Used only with your consent.
• Advertising: support Google Ads conversion tracking and remarketing so we can measure and optimize our campaigns. Used only with your consent.

5. Google Ads & Google Analytics

We run advertising campaigns through Google Ads and use Google Analytics to understand Site performance. Where you have consented, Google may set cookies to:

• Measure which ads led to a form submission or other conversion ("conversion tracking").
• Show you more relevant ads on other websites based on your visit to our Site ("remarketing").
• Provide us with aggregated, anonymized reporting on Site traffic and user behavior.

Google acts as an independent data controller/processor for this data under its own privacy terms. You can learn more about how Google uses data and manage your ad personalization settings at Google's Privacy & Terms and at Google Ad Settings.

6. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or UK, we rely on the following legal bases under the General Data Protection Regulation (GDPR):

• Consent — for analytics and advertising cookies, and for marketing communications you opt into.
• Contract — to provide the Services you purchase or enroll in.
• Legitimate interests — to respond to inquiries, secure the Site, and improve our Services, balanced against your rights.
• Legal obligation — where processing is required to comply with applicable law (e.g., tax and accounting records).

7. Sharing Your Information

We do not sell your personal data. We may share information with:

• Service providers who help us operate the Site and Services, including hosting providers, payment processors, email/CRM tools, and video-conferencing platforms used for live sessions.
• Google, for analytics and advertising purposes as described in Section 5, where you have consented.
• Google Maps, which is embedded on our Contact page to display our studio location. Loading this embed may allow Google to set its own cookies and process your IP address, independent of your cookie consent choice, under Google's own privacy policy.
• Legal and regulatory authorities, where required to comply with law, protect our rights, or respond to lawful requests.
• A successor entity in the event of a merger, acquisition, or sale of assets, subject to the same protections described here.

8. International Data Transfers

Our Site and service providers may process data outside your country of residence, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect data transferred internationally.

9. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy: contact form submissions are retained for up to 24 months, enrollment and billing records are retained as required by applicable tax and accounting law, and analytics data is retained according to Google Analytics' default retention settings unless you request earlier deletion.

10. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us at info@xrforgehub.com. We will respond within the timeframe required by applicable law.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of that information, and opt out of the "sale" or "sharing" of personal information (as those terms are defined under California law). We do not sell personal information for monetary consideration. You can exercise these rights by contacting info@xrforgehub.com.

12. Children's Privacy

Our Services are intended for adults and are not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Data Security

We use reasonable administrative, technical, and organizational measures to protect personal data against unauthorized access, loss, or misuse. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page. We encourage you to review this page periodically.

15. Contact Us

For any questions about this Privacy Policy or our data practices, contact us at:

• Email: info@xrforgehub.com
• Phone: +380 657145487
• Mail: 5th Topolnyi Lane, 6, Lviv, Lviv Oblast, 79000, Ukraine