Courtney P. Lacey LLC · Courtney P. Lacey · The School of Learning
Effective date: October 27, 2026 (UTC).
1. Operator, scope and contact
Courtney P. Lacey LLC, an Ohio limited liability company formed February 27, 2026, is owned and operated solely by Courtney P. Lacey and operates the Courtney P. Lacey website, The School of Learning educational platform and Inner Authority coaching. Courtney currently resides in Texas. The business operates virtually. Residential and mailing addresses, EIN and private registration documents are not publicly displayed. Any additional contact disclosure legally required for a particular service must be resolved before that service is offered. This policy addresses website accounts, learning features, inquiries, applications, bookings, coaching services and associated processing. No residential or mailing address is published.
Contact for privacy, account, deletion, coaching, cancellation, refund, legal and student-support requests: notify@courtneyplacey.com. This is the designated request address.
2. Information collected
- Registration/authentication: full name, email, password supplied to managed authentication, account ID, registration/verification timestamps, self-confirmation of age 18+ and optional announcement preference. Registration does not request a complete birth date or identification document.
- Optional profile photos: students and linked coaching clients can upload, replace or remove their own JPG, PNG or WebP photo, up to 5 MB, with a circular preview. A centered 512-pixel WebP is stored privately; no original is retained by this feature. Initials appear without a photo. Photos appear on the account dashboard/profile and beside linked clients in the authenticator-protected Coaching Vault. Owner-only writes and owner/authorized AAL2-administrator reads protect photos; authenticated downloads do not use public or signed photo URLs. Profile-photo cleanup is a required step in verified manual account deletion, not an automatic account-closure system.
- Learning and interests: saved course interests, course enrollments/access, member-library entitlements, enrollment-change audit records, lesson completion and timestamps. Registration itself does not purchase access.
- Free Learning: access to published resources of written, interactive, worksheet, self-assessment or challenge types, with optional downloads/video links. Private free-resource answers contain account/resource/question references, answer text and creation/update dates; course answers contain account/lesson/question references and timestamps. Reading free content does not require paid membership or course enrollment.
- Journal reflections: original answers you choose to save may reveal personal circumstances. Avoid unnecessary health, identity, financial or other sensitive information. Answers remain separate from completion tracking.
- Student notebooks: My Notebook stores titled personal notes and creation/update dates, with editing, deletion and PDF export. Current eligibility is a confirmed paid private-session booking matched to the profile email or administrator review access; Reset/Apprenticeship eligibility is not integrated while checkout remains inactive. Notebook contents are private to the individual student and do not appear in the owner/admin interface. Notebook access continues while the School account stays active, including after a coaching program ends.
- Coaching Vault: client names/email and optional linked adult account, program/enrollment status, session dates/status, confidential dated coaching notes, progress milestones, relationship end date and legal hold. Written coaching notes are required for private coaching enrollment and administrator-only. Clients see only their own coaching details, session dates and milestones intentionally shared by Courtney; confidential notes never appear in the client response. Note creation/update dates and content-free access/change audit records support accountability. Enrollment acknowledgments and automatic purchase integration are not implemented.
- Session recordings (not activated, optional only): separate explicit consent is required before any audio/video recording, covering purpose, storage, access, retention/deletion and withdrawal. Declining means "Recording consent: Declined — Session not recorded," without loss of coaching access. Authenticated clients can record decline/withdrawal decisions, associated with their coaching client record, actor, timestamp and scope/version; Affirmative grant, decline and withdrawal decisions are stored with authenticated identity, server timestamp, disclosure version and acknowledgment. Detailed disclosure can be expanded at any time and must be reviewed before granting. Recording capture/storage remain disabled; configured storage details and renewed informed confirmation are required before any recording.
- Inquiries/applications: names, email, phone where requested, organization, inquiry type, messages, program questions and administrator workflow notes. Declared-country collection and manual international review before payment are specified but not implemented in the current website application flow.
- Bookings: contact information, optional phone/notes, appointment type, scheduled date/time, reservation/confirmation/cancellation state, management-link token, Calendar/Meet identifiers and notification/reminder/recovery information. Browser timezone supports local time display.
- Payments: booking references, Stripe Checkout/payment identifiers, verified amount/status and recovery details. Full card numbers and security codes are entered on Stripe-hosted Checkout and are not stored by this application. Stripe processes additional payment/device information under its own notice. Website Stripe is currently test mode, not authorized live billing.
- Technical data: authentication/session state, temporary password-recovery state and request/error information processed by hosting/authentication. Error handling includes server error logs and optional runtime reports. Provider-level fields, retention and access are governed by the providers’ practices; this policy does not guarantee particular provider retention periods.
Reset intake/agreement/onboarding collection is not an activated website workflow. Any off-site intake must be disclosed if used; new website collection requires a policy update before activation.
3. Purposes
Account information enables verification, sign-in, recovery, profile support and authorized access. Learning records support interests, progress, enrollment/entitlements, private journals and notebooks. Answers and notes are stored so their owners can save, edit and revisit them. Journal reflections, notebook contents and confidential coaching notes are not used for marketing, testimonials, research, publication, grading or AI training without separate, specific authorization and any necessary technical changes. Coaching recordings are never used in testimonials, advertising or promotional material without a separate, specific authorization.
Inquiries/applications support responses, review and follow-up, including international-eligibility review before paid coaching. Bookings/payment records support availability, temporary holds, payment verification, appointment provisioning, invitations, management and operational notifications. Access checks and technical information help prevent misuse and investigate failures.
Email marketing: The School of Learning may send educational newsletters, program announcements, coaching promotions and relevant updates to those who opt in. Marketing consent is separate from mandatory transactional and account communications (verification, welcome, password recovery, booking and payment messages), and declining marketing does not affect program access. Marketing must include a functioning unsubscribe mechanism; no marketing campaign is authorized until that mechanism is verified. An optional School announcement preference can be changed in the dashboard. No marketing campaign is activated by publication of this policy.
4. Access controls and private records
Students ordinarily access their own profiles, interests, authorized learning content, journal answers and eligible notebooks. Authorized administrators manage students, enrollment/access, content and relevant business inquiry/booking records.
Journal answers and notebook contents are owner-only through server-side authorization and database row-level controls. Administrator status does not grant access to another student's answers or notebook. Enrolled administrators answering as students access only their own records. The application does not include an administrator journal- or notebook-review feature. The Coaching Vault requires a database-verified administrator plus authenticator MFA (AAL2) for confidential records, at both server and database levels. Clients have account-scoped access to session dates and explicitly shared milestones, never confidential notes.
These are application/database permissions, not end-to-end encryption. Privileged infrastructure/database operations can technically access stored information; any exceptional technical or legally necessary access must be restricted and documented. No absolute inaccessibility or confidentiality promise is made.
5. Third-party services
- Lovable Cloud: hosting, database, authentication and private learning-material storage. Automated transactional emails use Lovable's managed sender, which processes recipient, message and delivery/suppression information. Provider/subprocessor arrangements, region, backups, log retention and tracking settings are subject to provider practices; no specific region or retention period is promised here.
- Stripe: hosted checkout and verified payment processing; refunds are reviewed and processed manually through Stripe. Booking references and customer email are transmitted for checkout. School billing and Reset checkout/installments remain inactive.
- Google Calendar/Google Meet: availability, appointments, invitations and virtual sessions. Created events include appointment details, attendee name/email and submitted booking phone/notes. Private unrelated Calendar entries are not exposed to visitors. Session recording is optional and consent-gated as described above; the actual meeting-platform recording workflow must be verified before any recording occurs.
- Google Fonts: fonts are requested from Google-hosted services, which receive ordinary connection/request information.
- YouTube, Vimeo and Loom: supported learning video services. Free Learning's YouTube embeds use the privacy-enhanced youtube-nocookie.com host. Embeds can load when displayed. Provider requests may convey device/network information.
- External resources: opening linked sites or downloads can involve another operator with its own policies.
Personal information is processed by the service providers above as necessary to operate the website; no claim is made that information is never shared with them. Sale or advertising-sharing of personal information is not a listed practice; any future change requires a policy update. Legally required disclosures and exceptional technical access may occur where applicable; this policy does not authorize unrestricted contractor access.
6. Storage and security
Application records reside in Lovable Cloud. Server-side authorization and database row-level permissions restrict ordinary access. School material downloads are private; verified authorized access generates short-lived signed links. Downloaded copies may remain on the recipient's device. Booking management links contain secret tokens and should be kept private.
Hosting location, international transfers, privileged personnel and provider safeguards require confirmation. The site does not establish HIPAA compliance, local-only hosting, end-to-end encryption or perfect security. No system guarantees absolute security.
7. Retention and account deletion
Account closure: request closure via notify@courtneyplacey.com. Following identity verification, the intended process is to disable account access and delete eligible personal information, subject to applicable exceptions. Self-service closure, access-disable workflow and scheduled deletion are not implemented. The internal target is 90 days after verified closure, but no public deletion deadline is promised until an operational process can reliably meet it.
Records required for legal, tax, accounting, fraud prevention or disputes may be retained as applicable. Coaching notes and consented recordings have an approved one-year retention target after the coaching relationship ends, subject to applicable law and documented legal exceptions. Earlier deletion may be requested subject to applicable obligations. The Vault stores the relationship end date and a legal-hold flag; note deletion is blocked while a legal hold applies. Retention review and deletion remain manual; no automatic deletion or recording storage is claimed.
Unpublishing or removing free resources can hide journal entries without automatically deleting stored answers; removing an entry from view is not the same as deleting it from storage. Deletion from active application storage does not guarantee immediate erasure from provider backups or third-party systems.
8. Privacy requests and available controls
Students can upload, replace or remove their optional profile photo, change their name/announcement preference, remove interests and edit/delete individual answers from accessible learning content, and manage and export eligible notebooks.
Requests for access, correction, export, account closure or deletion assistance: email notify@courtneyplacey.com, state the request type and identify the account email. Do not email passwords, full card details or unnecessary sensitive journal text. The owner verifies identity using proportionate account-linked checks, reviews linked records and provider/legal constraints, and communicates the outcome in accordance with applicable law. Applicable privacy/consumer rights and statutory requirements remain preserved; jurisdiction-specific rights, exceptions and complaint contacts require legal review.
9. Browser storage, analytics and email tracking
Standalone browser authentication uses localStorage; the editor preview can share sign-in through its managed storage bridge. Password recovery uses temporary sessionStorage. Provider services may also use cookies or similar technologies under their own practices.
The application does not include a conventional advertising-pixel or analytics SDK. Hosting visitor analytics and managed-email open/click tracking settings have not been independently verified; this policy does not promise the absence of provider-level analytics or tracking.
10. Adults, international access and updates
The School of Learning's online student and coaching services are intended for adults aged 18 or older. Speaking engagements and institutional programs involving minors are separate services governed by appropriate institutional arrangements. Free adult learning resources may be available internationally, subject to applicable restrictions. Paid coaching is not promised to be legally available in every country: international prospects may apply, and Courtney manually reviews international eligibility — including privacy, consumer, tax and service-delivery requirements — before any payment is accepted.
Material policy changes will be communicated to affected registered users by email, with renewed consent where required by law. Automated policy-change notification and renewed-consent workflows are not implemented. Required notices and consent must be handled before a material change takes effect.