Policy · Updated November 1, 2025
GDPR Privacy Notice
In plain English
Your data rights if you are in the European Economic Area.
If you are in the European Economic Area or the United Kingdom, this notice explains your rights under the GDPR and how we meet them.
Controller
Starfhax Institute, Waterloo, Iowa, USA, is the data controller for the information described in our Privacy Policy. Contact: privacy@starfhax.institute.
Lawful bases
We process account and enrollment data to perform our contract with you, payment data to meet legal and tax obligations, and optional marketing on the basis of your consent.
International transfers
Data may be processed in the United States. We use contractual safeguards with our service providers for transfers from the EEA and UK.
Your rights
You have the right to access, correct, delete, restrict or port your data, to object to processing, and to withdraw consent at any time. We respond within one month.
Complaints
You may lodge a complaint with your local supervisory authority. We would appreciate the chance to resolve the issue first through privacy@starfhax.institute.
Questions about this policy?
Email legal@starfhax.institute or use the Student Complaint Policy for a formal concern.