Last updated: 30/09/2026

At International PastryCampus / PastryCampus, we respect your privacy and are committed to handling your personal information responsibly.
This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, how long we retain it, and the rights you have over your information when you visit our website, register for our courses, purchase our products or services, or communicate with us.
By using our website or providing your personal information to us, you acknowledge the practices described in this Privacy Policy.

Who is responsible for your data?

The data controller responsible for the processing of your personal data is:
PYMEHELP & FINANCES OÜ
Harju maakond, Tallinn, Lasnamäe linnaosa, Lõõtsa tn 2a, 11415
Estonia
CompanioEstonia OÜ (14522788)
pastrycampusprivacy@gmail.com

If you have any questions about how we handle your personal data or wish to exercise your data-protection rights, you can contact us using the details above.

What personal data do we collect?

Depending on how you interact with PastryCampus, we may collect different categories of personal information, including:
Information you provide directly
This may include:

• First and last name
• Email address
• Telephone number, where necessary
• Billing and payment information
• Country or billing address
• Information provided when registering for a course
• Information you provide when contacting us
• Preferences or information you voluntarily provide in connection with our courses or communications

Information collected automatically
When you use our website, certain technical information may be collected automatically, such as:

• IP address
• Browser and device information
• Operating system
• Pages visited and interactions with our website
• Date and time of access
• Information relating to website performance and security

The exact information collected may depend on the technologies and third-party services used on our website.
We aim to collect only the information that is reasonably necessary for the purposes described in this Privacy Policy.

How do we use your personal data?

We may use your personal information for the following purposes:
Providing our services
We use your information to:

• Process course registrations and purchases
• Provide access to courses and other digital products
• Communicate information relating to your purchase or registration
• Respond to questions and requests
• Manage customer accounts where applicable
• Provide customer support
• Process refunds, cancellations or other transactions where applicable

Communicating with you
We may use your contact information to send:

• Course announcements
• Registration and launch information
• Information about new courses and educational materials
• Important service or account communications
• Offers, promotions and other marketing communications where permitted by law

Where marketing communications require your consent, we will obtain that consent in accordance with applicable law.
You may unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us directly.
You also have the right to object to direct marketing at any time. Where you object, we will stop processing your personal data for direct-marketing purposes.

Improving PastryCampus
We may use information about how visitors and customers interact with our website and services to:

• Understand how our website is used
• Improve our website and educational offerings
• Identify technical problems
• Measure the effectiveness of our communications
• Understand general trends and demand for our courses

Where possible, information used for analytical purposes will be aggregated or otherwise handled in a way that reduces the identification of individual users.

Newsletter and marketing communications

If you subscribe to the PastryCampus mailing list, we will use the information you provide, primarily your email address and name where provided, to send you communications relating to PastryCampus.
These communications may include:

• New course announcements
• Course registration dates
• Early-access opportunities
• Special offers and discounts
• Educational content
• PastryCampus news and updates
• Other information relating to our products and services

You can unsubscribe from marketing communications at any time using the unsubscribe link included in our emails.
Unsubscribing from marketing communications does not necessarily stop essential communications relating to an existing purchase, course registration, payment, account or other transaction.
We do not sell your personal information to third parties.

Payments and transactions

When you purchase a course or other product through PastryCampus, payment information may be processed by our payment-service providers.
Depending on the payment method available at the time of purchase, payment providers may collect and process information such as your name, billing information, payment details and transaction information.
We do not intend to store complete payment-card details on our own systems. Payment information is processed by the relevant payment provider in accordance with its own privacy and security policies.
We may retain transaction information necessary to:

• Confirm and administer your purchase
• Provide access to the product or course purchased
• Process refunds or cancellations
• Maintain accounting and financial records
• Comply with legal and tax obligations
• Resolve disputes or prevent fraudulent transactions

Our payment providers may process personal data in accordance with their own terms and privacy policies.

Contact us

If you have questions about this Privacy Policy, our handling of personal data, or your data-protection rights, please contact us:
PYMEHELP & FINANCES OÜ
Email: pastrycampusprivacy@gmail.com
Last updated: 30/09/2026

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or data-processing practices.
When we make material changes, we will update the “Last updated” date at the beginning of this Privacy Policy and, where appropriate, provide additional notice.
We encourage you to review this page periodically to remain informed about how we process personal information.

Cookies and similar technologies

Our website may use cookies and similar technologies to provide essential website functionality, remember preferences, analyse website usage, improve performance and, where applicable, support marketing activities.
Where consent is legally required for a particular type of cookie or tracking technology, we will request that consent before using it.

Complaints

If you believe that your personal data has been handled in a way that violates applicable data-protection law, we encourage you to contact us first so that we can investigate the matter.
You also have the right to lodge a complaint with the relevant data-protection supervisory authority in your country of residence, place of work, or the place where you believe an infringement occurred.

Your data-protection rights

Depending on the circumstances and applicable law, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your personal data.
• Restrict certain processing of your personal data.
• Object to certain processing, including direct marketing.
• Receive your data in a portable format where the right to data portability applies.
• Withdraw consent where processing is based on your consent.

Withdrawing consent does not affect the lawfulness of processing that took place before consent was withdrawn.
You may exercise your rights by contacting:
pastrycampusprivacy@gmail.com
We may need to verify your identity before completing certain requests in order to protect your information.
We will generally respond to valid data-protection requests within one month, although applicable law allows for extensions in certain circumstances.

How long do we keep your data?

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
For example:

• Newsletter information may be retained while you remain subscribed to our marketing communications.
• Purchase and transaction information may be retained for as long as necessary to fulfil the transaction and meet applicable accounting, tax and legal obligations.
• Information relating to customer-support requests may be retained for as long as reasonably necessary to resolve the request and maintain appropriate records.
• Certain information may need to be retained after you request deletion where we are legally required to retain it or where it is necessary to establish, exercise or defend legal claims.

When personal data is no longer required, we will take reasonable steps to delete or anonymise it.

Third-party service providers

We may use trusted third-party service providers to operate PastryCampus and provide our services. These may include providers responsible for:

• Website hosting
• Website development and maintenance
• Email and newsletter distribution
• Payment processing
• Course hosting and delivery
• Customer-support services
• Analytics
• Security and fraud prevention
• Other technical or operational services

Where these providers process personal data on our behalf, we take reasonable steps to ensure that they process that information only for appropriate purposes and provide appropriate safeguards.
Some service providers may process information outside the European Economic Area (EEA). Where this occurs, we will rely on an appropriate legal mechanism for the transfer where required by applicable data-protection law.

How do we store and protect your data?

We take reasonable technical and organisational measures designed to protect your personal information against:

• Unauthorised access
• Accidental loss
• Destruction
• Alteration
• Unauthorised disclosure
• Other unlawful or unauthorised processing

Access to personal information is limited to people and service providers who reasonably need it for the purposes described in this Privacy Policy.
However, no method of transmission or electronic storage is completely secure. We therefore cannot guarantee absolute security of your information.