Privacy policy

Last updated 13 August 2026

This policy explains what personal information North CX Advisory, trading as Kristan Teaches, collects from you, why we collect it, who else can see it, and what you can ask us to do about it. It is deliberately specific, because a privacy policy written in generalities tells you nothing.

Who is responsible for your data

The data controller is North CX Advisory, B.C. 6010552, Ajman Business District, Ajman, United Arab Emirates. For any question about your personal information, or to exercise any of the rights described below, email hello@kristanteaches.com.

What we collect, and why

If you join the waitlist

We collect your first name and email address, because you gave them to us in order to receive the AI Operations Audit worksheet and the emails leading up to launch. Our email provider also records technical information generated by the sending and receiving of email, including whether a message was opened, whether a link in it was clicked, and the approximate location and device implied by that activity.

Our lawful basis is your consent, given by submitting the form and confirming it by clicking the link in the confirmation email. That double confirmation exists so that consent is recorded rather than assumed.

If you buy the course

We collect your name, email address, country, and the record of what you purchased and when. Payment card details are collected and processed by Stripe, and are never seen, handled or stored by us at any point. Our lawful basis is the performance of our contract with you, and, for the transaction records we are required to retain, compliance with a legal obligation.

If you email us

We keep your message and our reply, so that a conversation about your account or your purchase makes sense the next time you write. Our lawful basis is our legitimate interest in answering you properly.

If you simply visit the site

Our web host records standard server information, including IP address and browser type, for security and to keep the site running. This site does not run advertising trackers, and does not use cookies for advertising or profiling.

One thing worth naming plainly: the fonts on this site are served by Google Fonts, which means your browser requests them from Google and Google therefore receives your IP address in the process of serving them. That is a real transfer of data to a third party and we would rather tell you than leave it unmentioned.

Who else processes your information

We use a small number of service providers, each of which processes data on our instructions:

We do not sell your personal information, we do not rent or share it with advertisers, and we do not use it to train any machine learning system.

A note about the AI platforms used in the course

The course teaches you to use Claude, made by Anthropic, inside your own account. Any business information you put into that tool is a matter between you and Anthropic under their terms, and passes through no system of ours. We never see, receive, or process the content of your work.

International transfers

We operate from the United Arab Emirates and our providers are largely in the United States. If you are in the United Kingdom or the European Economic Area, your information will therefore be transferred outside that area. Where that happens we rely on the safeguards offered by those providers, which for our principal providers means standard contractual clauses.

How long we keep it

Waitlist subscribers are kept until you unsubscribe or ask to be deleted, and unsubscribing removes you from all further mailings immediately. Records of a confirmed opt-in are retained while you remain subscribed, because that record is the evidence of your consent.

Purchase records are kept for as long as is required for accounting and tax purposes. Email correspondence is kept for two years unless it relates to a purchase, in which case it follows the purchase record.

Your rights

Wherever you live, you may ask us to show you what we hold about you, correct it if it is wrong, delete it, or stop using it for a particular purpose, and we will do so. If you are in the UK or the EEA, those rights are statutory and include the right to receive your data in a portable form, the right to object to processing based on legitimate interests, and the right to withdraw consent at any time without affecting the lawfulness of what happened before you withdrew it.

To exercise any of these, email hello@kristanteaches.com. We will respond within thirty days and we will not ask you why.

Every marketing email we send carries an unsubscribe link, and it works immediately. You do not need to write to us to stop receiving them.

If you are in the UK or the EEA and you believe we have handled your information badly, you are entitled to complain to your national supervisory authority, and in the United Kingdom that is the Information Commissioner's Office. We would appreciate the chance to put it right first.

Children

This site and this course are intended for adults running businesses. We do not knowingly collect information from anyone under sixteen, and if we learn that we have, we will delete it.

Security, honestly described

Your information sits inside established platforms with their own security practices, is transmitted over encrypted connections, and is accessible only by Kristan. No arrangement is perfectly secure, and we would rather say so than claim otherwise. If a breach occurs that puts your rights at risk, you will be told, and so will the relevant authority where the law requires it.

Changes to this policy

When this policy changes, the date at the top of the page changes with it. If a change materially affects how your information is used, subscribers will be told by email rather than left to notice.