PRIVACY POLICY

Last updated: Oct 8, 2026

This privacy notice for Leah Guzman Studio (“we,” “us,” or “our“), describes how and why we might collect, store, use, and/or share (“process“) your information when you use our services (“Services“), such as when you:

Visit our website at https://www.leahguzmanstudio.com, or any website of ours that links to this privacy notice.

Engage with us in other related ways, including our online courses, memberships, art therapy services, sales, marketing, or events.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hello@leahguzman.com

SUMMARY OF KEY POINTS

  • What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us, the choices you make, and the products and features you use.
  • Do we process any sensitive personal information? We do not process sensitive personal information, except when voluntarily provided as part of private 1:1 Art Therapy intakes governed by separate confidentiality agreements.
  • Do we receive any information from third parties? We do not receive any information from third parties.
  • How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
  • In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties (such as payment processors)
  • How do we keep your information safe? We have organizational and technical processes in place to protect your personal information.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us
In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services (such as the Creative Soul Society), express an interest in obtaining information about us, when you participate in activities on the Services, or when you contact us.

Personal Information Provided by You: The personal information we collect may include the following:

  • Names
  • Email addresses
  • Debit/credit card numbers
  • Billing addresses

Payment Data: We may collect data necessary to process your payment if you make purchases. All payment data is stored by our payment processors (e.g., Stripe, PayPal). You may find their privacy notices on their respective websites.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes.

Information automatically collected
In Short: Some information (such as your Internet Protocol (IP) address and/or browser and device characteristics) is collected automatically when you visit our Services.

This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting.

The information we collect includes:

  • Log and Usage Data: Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services.
  • Device Data: Information about your computer, phone, tablet, or other device you use to access the Services.
  • Location Data: Information about your device’s location, which can be either precise or imprecise.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

  • To facilitate account creation and authentication and otherwise manage user accounts.
  • To send you marketing and promotional communications. You can opt out of our marketing emails at any time.
  • To save or protect an individual’s vital interest, such as to prevent harm.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law.

If you are located in the EU or UK: We may rely on the following legal bases to process your personal information: Consent, Legitimate Interests, Legal Obligations, and Vital Interests.

If you are located in Canada: We may process your information if you have given us specific permission (express consent) or inferred permission (implied consent). You can withdraw your consent at any time.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with third parties.

We may need to share your personal information in the following situations:

  • Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Service Providers: We may share your data with third-party vendors, service providers, contractors, or agents who perform services for us (e.g., payment processing, email delivery, hosting services).

5. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.
​
​We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

6. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.
​
​We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet can be guaranteed to be 100% secure.

7. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services.

8. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: You may review, change, or terminate your account at any time. In regions like the EEA, UK, Switzerland, and Canada, you have specific rights under applicable data protection laws.

Depending on your location, you may have the right to request access and obtain a copy of your personal information, request rectification or erasure, restrict processing, and data portability.

  • Withdrawing your consent: You have the right to withdraw your consent at any time.
  • Opting out of marketing: You can unsubscribe from our marketing communications at any time by clicking on the unsubscribe link in the emails that we send.

Account Information:

If you would at any time like to review or change the information in your account or terminate your account, you can log in to your account settings and update your user account. Upon request, we will deactivate or delete your account.

9. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature. We do not currently respond to DNT browser signals.

10. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: If you are a resident of California, Colorado, Connecticut, Utah, or Virginia, you are granted specific rights regarding access to your personal information.

California Residents (CCPA):
You have the right to request deletion of your personal information, the right to be informed (request to know), the right to non-discrimination, and the right to opt out from future selling or sharing of your personal information. We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months.

Colorado, Connecticut, Utah, and Virginia Residents:
You have the right to be informed whether or not we are processing your personal data, access your data, correct inaccuracies, request deletion, and opt out of targeted advertising or the sale of personal data.

To exercise these rights, you can contact us at hello@leahguzman.com

11. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Revised” date.

12. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at hello@leahguzman.com or contact us by post at: 
​
​Leah Guzman Studio
16370 SW 92nd Court
33157 Palmetto Bay, Florida
​United States

13. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please log in to your account at https://www.leahguzmanstudio.com/contacts/sign_in or email us.