Privacy Policy
Version updated on April 2023
Hi! If you want to understand how Teachable and the other companies in Hotmart Company collect, store, use, share, and delete your personal data, you’re in the right place. Depending on your activity on the Platform, some special rules may apply to you. So read the information below carefully.
Contents
Overview
1. PERSONAL DATA PROCESSED BY HOTMART COMPANY
2. WHAT ARE THE PURPOSES OF PROCESSING OF PERSONAL DATA
3. LEGAL BASES OF PROCESSING
4. PERSONAL DATA PROCESSED BY HOTMART COMPANY IN THE NAME OF THIRD PARTIES
5. RETENTION PERIOD OF PERSONAL DATA
6. SHARING OF PERSONAL DATA
7. INTEGRATIONS AND THIRD PARTY
8. INTERNATIONAL TRANSFERS
9. RIGHTS IN RELATION TO YOUR PERSONAL DATA
10. SECURITY
11. PROCESSING OF CHILDREN'S PERSONAL DATA
12. CONTROLLER CONTACT INFORMATION
Teachable, and all the companies in Hotmart Company, are concerned about your privacy and are committed to preserving it. The processing of personal data related to your use of the services provided by Hotmart Company is described in this Privacy Policy, which should be read together with the Teachable Terms of Use and of the other companies in their business group, to the extent that you have a relationship with the respective companies.
Please read this Privacy Policy carefully before using the services offered by Hotmart Company, as the conditions outlined below are applicable to the processing of your personal data by the entities of Hotmart Company.
This Policy may be modified at any time, so it is important that you always review its terms. When substantial alterations are made to this Policy, you will be informed by email if you are a User registered on the Teachable Platform or with the services provided by Hotmart Company. This Policy and its respective updates prevail over any prior proposals, contracts, understandings or agreements, whether verbal or written, that may have existed between you and any one of the companies of the Hotmart Company, especially concerning privacy or personal data.
Overview
- A. This Privacy Policy establishes the rules on (a) how and to what ends your personal data can be processed by Hotmart Company, (b) with whom these data can be shared, and (c) how the Users can manage their personal data. It applies to the use or access to the Platform or other services offered by Hotmart Company through any of their sites (including, but not limited to, teachable.com, hotmart.com and enotas.com.br) and their subdomains, as well as through other sites, interfaces or applications in which companies of Hotmart Company make their resources available, including those applications on cell phones, tablets or other electronic devices.
- B. To facilitate the reading of this Policy, we offer a Glossary, which gives the meaning of expressions beginning with capital letters in the Hotmart Company Terms, as well as in this or in other Policies of companies of Hotmart Company. Furthermore, it is important that you understand the specific meanings of the expressions below used in the context of protection of privacy and highlighted in the Terms, in this Policy or in other Policies of Hotmart Company companies without capital letters:
“Personal data”, in the singular or in the plural, means any information that identifies the User or which makes their identification possible. So as generic as this may appear, personal data may be any information that identifies you directly or any information which functions as a piece in a puzzle that leads to your identification.
“Processing”, as well as the verb “process”, means any operation done with personal data, such as that which refers to the collection, production, receiving, classification, use, access, copying, transmission, distribution, processing, filing, storage, deletion, evaluation, control, modification, communication, transfer, diffusion or extraction.
“HotPay Services”, Hotmart Company may allow their partners (such as financial institutions, payment institutions responsible for the issuing of cards under the license of major credit card companies, the major credit card companies and correspondent banks) to offer their services in an aggregated form such as, for example, the provision of the Card to the Users, offered only to Users located within Brazilian territory. If the User opts for the Card, there may be terms and conditions of these partners that you must fulfill. These partners are mentioned in the Policy of the Hotmart Card for Brazil.
"Creator Content", When using Teachable Services (as defined in Teachable's Terms of Use), a Creator may upload, submit, or otherwise provide content to the Teachable Platform ("Creator Content"). The Creator is the owner of their Creator Content, and the sole Controller of any personal data included in their Creator Content ("Creator Data"). Teachable processes Creator Data on behalf of the Creator at the Creator's direction. Teachable is a Processor, as defined in the Data Processing Agreement and under applicable law, of Creator Content and Creator Data.
"Student Data", To connect Creators and Students and enable Creators to provide services to their Students, Teachable provides Creators with access to a limited set of personal data of Students enrolled in their services ("Student Data") as specified in this Privacy Policy. Teachable and Creators may each use Student Data for their own business purposes, at all times subject to the terms of the Data Processing Agreement, our Terms of Use, and our Privacy Policy. Teachable and Creators are each independent Controllers, as defined in the Data Processing Agreement and under applicable law, of Student Data collected by Teachable that is accessed by or transferred to Creators.
- PERSONAL DATA PROCESSED BY HOTMART COMPANY
Personal Data. The personal data processed by Hotmart Company (“User account Data" and “Creator account Data”) may vary, in accordance with each one of the respective companies and their processing of personal data practices, as well as depending on the type of interaction of the User with the Platform or with each of Hotmart Company.
These personal data may be collected directly from the User, obtained from third parties or collected automatically.
The personal data may involve, by way of example: (a) registration information, such as email, full name, address, telephone, cell phone, social security number, ID number, driver’s license number, profile photo, and passport; and (b) bank information, such as name of financial institution at which the User has a bank account, account number, type of account, branch, IBAN and credit card data, including the name of the holder, expiration and CVV code.
Below is a list of the personal data collected by Hotmart Company, shown in categories and different forms of collection for ease of understanding.
- 1.1 Personal Data collected directly from the User. Hotmart Company may collect personal data directly from you, when you, for example, set up an account, initiate a process of purchase directly via checkout and/or interact with Hotmart Company through any means, including by our chatbot.
- 1.2 Interaction “offline”. Hotmart Company may collect personal data when you interact with them by means other than access through the Platform, such as, for example, your registration data or your image when you participate in an event organized by Hotmart Company or an event organized by a third party whose activity is contractually linked to Hotmart Company.
- 1.3 Optional fields. The Platform provides certain fields for optional completion. These fields are marked as optional and have the purpose of improving the personalization of content provided to the User. The information you enter in these fields will be collected by Hotmart Company.
- 1.4 Public data. Hotmart Company considers some personal data as public, because they may be seen by any person, within or outside of the Platform, including if this person does not have an account on the Platform. The information is considered as public data that you enter in the fields marked as “public data”. You, other persons that use the Platform and Hotmart Company themselves may provide access or send public data to any person outside of the Platform. It is also possible to view, access, share once again or download public data through tools of third parties, as well as search mechanisms, APIs and offline media, or through applications, sites and other Services of Third parties.
- 1.5 Personal data obtained from third parties. Hotmart Company may have access to certain personal data through third parties, whether they be registration or bank information. This happens, for example, when, due to compliance with legal or regulatory obligation, Hotmart Company needs to consult databases maintained by third parties that enable the analysis of credit restrictions, anti-fraud analyses and other analyses of risk management integrated into the Platform. Hotmart Company also collects registration information through third parties when you sign up, connect to or log in to the Platform through a Third Party Service (for example, Facebook). Hotmart Company may also have access to the registration information through third parties for enrollment in events, surveys, publicity campaigns and other activities organized by these third parties, whose activity is contractually linked to Hotmart Company.
- 1.7 Creators' payment information. We use third party payment gateways to process payments made through the Platform. For payments processed by the native payment gateways of some of Hotmart Company, third parties provide us with information related to the payment status of your account, with you having to link your payment account to the Platform to receive your payments. When linking to your account, we receive certain information related to your payments, including the type of your payment card and its last 4 digits, your postal code, country of origin, date of expiration, and your email address associated with the type of payment. Besides this, we collect certain personal information for tax purposes, which may include your full name, address and registration number. Our outsourced payment gateways are independent and have their own privacy policies. For further information on how your payment data is processed and stored, we recommend that you analyze the privacy policies of the payment gateways.
- 1.8 Participation in Creator content. When you enroll in a course, Coaching service or use or access other Creator content, we collect personal data relating to your participation in Creator content, such as courses you have enrolled on, test results, your progress, and certifications.
2. WHAT ARE THE PURPOSES OF PROCESSING YOUR PERSONAL DATA
3. LEGAL BASES OF PROCESSING
3.1. Legal Bases. The processing of personal data by Hotmart Company is always founded on a legal basis provided for in the applicable legislation. The legal bases used by Hotmart Company may vary depending on the context of processing, and include the following:
- 3.1.1. Consent. When the User accepts the processing of personal data, for example, when agreeing to receiving advertising or survey communications. This consent may be cancelled at any time by the User.
- 3.1.2. Compliance with legal or regulatory obligation. When a Hotmart Company is obliged to process personal data due to a legal or regulatory determination, for example, such as when a Hotmart Company stores access records for the purposes of compliance with legislation on money laundering prevention.
- 3.1.3. Execution of Contract or procedures related to the Contract. When the processing of personal data is necessary for the execution of a contract signed between a Hotmart Company and the data subject, or when necessary for procedures preliminary to the contract, for example, such as when we need to process your payment data at the time when you purchase on the Platform.
- 3.1.4. Exercising regular rights in a judicial, administrative or arbitral process. When there is the need to process personal data due to judicial, administrative procedure, or arbitral action.
- 3.1.5. Legitimate interest. When a Hotmart Company decides to proceed with the processing of personal data after a careful analysis involving the evaluation of the purpose and need of the processing the User and the expectation of the User in the processing of Personal Data. This legal basis is used when, for example, Teachable sends out a newsletter related to the User's interests, considering their interaction with the Platform to help in the support and promotion of Hotmart Company activities. In this case, Hotmart Company always allows the User the option to cancel the receiving of these communications.
4. PROCESSING OF PERSONAL DATA BY HOTMART COMPANY IN THE NAME OF THIRD PARTIES
- 4.1 Processing of Personal Data at the Request of Third Parties. There is personal data processed by Hotmart Company at the request of third parties. Hotmart Company processes these personal data according to rules formalized with these third parties through written contracts. For example, the Creator may request, through the Platform, additional personal data from the Buyer (“Creator Data”). The types of Creator Data may vary depending on the specific orientation of the Creator.
- 4.2 Processing of Personal Data relating to HotPay Services. Hotmart Company may also process certain personal data in the name of third parties when you opt to use HotPay Services. In transactions relating to Hotmart Card, Hotmart Company may collect the card number, the name of the holder, expiry date, CVV code, CPF (ID number) and payment transaction information in the name of a partner payment institution and from the credit card company.
- 4.3 Responsibility for the Processing of Personal Data by Third Parties. The third parties referred to in the previous items are also processing agents responsible for the personal data in the context of offering their products and services. Particularly the third parties may be the Creators whose responsibilities and attributions are established in the Data Processing Agreement.
- 4.3.1 In particular, the User who opts for the Hotmart Card, despite not having direct contact with the credit card company or the Hotmart partner payment institution, has a contractual link with these third parties and therefore is also linked to the terms of use and to the privacy policies applicable to these third parties.
5. RETENTION PERIOD OF PERSONAL DATA
-
5.1
Processing Period. The personal data is processed by Hotmart Company until at least one of the circumstances described below is reached:
-
Achieving the purpose of processing.
-
The personal data is no longer necessary or pertinent to achieve the specific desired purpose.
-
The end of the Contract with the User, for any reason.
-
Exercising the right of revoking consent by the User, when the processing of personal data was done on the grounds of this legal basis.
-
Penalization applied by the body responsible for taking care of, implementing and oversight of fulfillment of the legislation applicable, or by other competent bodies.
-
5.2
Conservation of Personal Data. In certain situations, Hotmart Company may conserve the personal data residually even after the circumstances of the end of processing of personal data, due to compliance of a legal or regulatory obligation, or even in circumstances in which there is a legitimate purpose of Hotmart Company. In these cases, the personal data will be stored in a secure place with restricted access and for the time necessary to comply with the legal or regulatory obligation, or until the end of the legitimate purpose of Hotmart Company.
6. SHARING OF PERSONAL DATA
- 6.1 Hotmart Company only shares personal data with third parties in the circumstances described below. Hotmart Company does not sell or disclose the personal data collected for monetary purposes. These third parties sign a written contract with Hotmart Company and are aware of their responsibilities at each stage of the processing, principally of the duty to implement security measures that meet the requirements of the contract and of the legislation applicable.
- 6.1.1 User Consent. When you give your consent, we share your information as described at the time of the consent – for example, such as authorizing the sending of personal data to third parties to enable participation in events.
- 6.1.2 Compliance with the law, prevention of damages and security. When there is a need to share personal data with third parties in order to (a) prevent fraud (for example, such as money laundering risk analyses), which may involve automated decisions; (b) verifying a list of Users with restrictions; (c) authenticating documentation sent; (d) enabling a support service; (e) avoiding illegal activities; (f) proceeding matters of disputes between Users; (g) proceeding matters of internal investigations relating to any conduct which may violate the rules of the Terms or of the Policies of Hotmart Company.
- 6.1.3 HotPay Services. The personal data may also be shared with third parties when the User, in any way, makes use of the HotPay Services, in particular when the User opts for the Hotmart Card. The personal data, including the card number, will be shared with the credit card company and with the partner payment institution of Hotmart Company. This sharing is for the purposes of processing payment, providing the card services, preventing, detecting and investigating any fraud or restriction lists, facilitating in resolution of disputes involving reimbursement or chargeback.
- 6.1.4 Between Companies of their Business Group. The sharing of personal data may occur between the parent companies, subsidiaries, affiliated companies or ones under common control of Teachable, or any companies of Hotmart Company, to enable the Services of Hotmart Company, to generate administrative efficiencies and to facilitate the use of various services by the same User.
- 6.1.5 Service Providers. Your personal data may be shared with third parties involved in the activities of financial, accounting, legal advice, non-profit activities and potential investors, as well as third parties involved in the provision of data backup, cloud computing services providers or to carry out analytic studies.
- 6.1.6 Sharing User's Information with Creators. When you participate with Creator content, Hotmart Company will share certain information with the Creator to allow the Creator to supply the services to you. This information includes: (a) information of the account, such as your name and email address; (b) payment information , such as the amount paid, your address and other billing information, but never the complete number of your credit card; (c) your IP address; (d) information on your participation in the content of the Creator, including your enrollments, progress, results of tests and certificates; (e) any message you have exchanged with the Creator through the Platform.
- 6.1.7 Sharing Information of the Creator with Users. When you use the Services of Hotmart Company to publish Creator content, information contained in your Creator content will be visible to the Users which have access to the Creator content. For example, when you publish your bio on the sales page, personal data from your bio will be visible to the people who visited the sales page.
- 6.1.8 With Integrated Services. When you decide to integrate third party services on your Platform, your personal data will be shared with these third parties. We recommend that you read the terms of use and privacy policies of these third parties to understand how they collect, use and share your personal data.
- 6.1.9 With Business Partners. Sometimes we make partnerships with third parties to offer events, promotions, competitions and other programs. To take part in these offers, you may be requested to provide your email address and other personal data.
- 6.1.10 With Advertisers and Data Analytics Providers. We may share your Personal Data with advertisers, advertising networks and providers of data analytics through cookies or other technologies.
- 6.1.11 With Affiliates. We may share your personal data with our parent company, with affiliates or with other companies under common control. We may also share your personal data when transacting part or all of our business, such as the sale of a business unit, acquisition, merger, consolidation, or in the event of bankruptcy or judicial recovery.
- 6.1.12 With Governmental, Police Authorities or the Judiciary. Hotmart Company may be obliged to share your personal data with governmental, police authorities or with the judiciary, whenever necessary to comply with a judicial order or request from the respective authority.
7. INTEGRATION AND THIRD PARTY
-
7.1 You may permit that our Platform interacts with third party services (such as Facebook, Google, Zoom). The information you allow to be accessed by us depends on each service and may be affected by the privacy configurations that you and the others with whom you are connected establish when using the services. Third party services are operated, controlled and maintained by third parties, who have no relationship with us. We recommend that you read the terms of use and privacy policies of the respective third parties to understand how your personal data is collected, used and shared by them with us or with other third parties.
-
7.1.1 Hotmart Company, in certain cases, may link services of third parties to the Platform by means of application programming interface (APIs), for example, such as the YouTube API. These third party services do not fall within the scope of the services of Hotmart Company and do not form part of the Platform, and are subject to different terms and conditions, such as the
YouTube Terms of Service
and the
Google Privacy Policy
. Hotmart Company is not responsible for these services and, when you interact with them, you are providing them with your personal data directly.
8. INTERNATIONAL TRANSFERS
- 8.1 International Transfers. Hotmart Company may transfer your personal data to countries other than that where you are located. Hotmart Company adopts the measures required by law, when such exists and is applicable, to ensure the protection of these personal data. In jurisdictions where the legislation or regulation in effect has no specific criteria or clear rules for international transfers of personal data, Hotmart Company will adopt good practices to protect your personal data, signing contracts with the receiving parties of the respective information that establish measures in accordance with the rules of the place where the personal data were collected initially.
- 8.2 In jurisdictions where Standard Contractual Clauses have already been approved by the competent bodies and represent proper documental safeguards to allow the international transfer of data to another jurisdiction, Hotmart Company will implement the respective Standard Contractual Clauses in their contracts with the receiving parties of personal data before making any international transfer.
9. RIGHTS IN RELATION TO YOUR PERSONAL DATA
-
9.1
Rights: Depending on the law applicable to the processing of your personal data, you may have certain specific rights in relation to your personal information, which may be exercised through this
form
.
- 9.2 To speak with the person responsible for the personal data protection, get in touch using this form.
- 9.3 Whenever any Hotmart Company is acting in the name of third parties, and the User decides to seek satisfaction of their rights through a Hotmart Company, we may attend, in certain circumstances, to this request, if applicable.
- 9.4 If you wish to cancel the sending of newsletters, emails, telephone calls or SMS publicity, you may do this through the link provided in the communications themselves.
- 9.5 Teachable reserves the right to refuse to attend to requests that are manifestly unfounded and/or excessive.
- 9.6 All the rights above applicable in your jurisdiction may be exercised by you at any time, at no cost, except for the charging of a fee as permitted in accordance with the legislation or regulation in effect, and Hotmart Company undertakes to make their best efforts to attend to the requests transparently and in an agile manner.
- 9.7 To guarantee that the rights are being exercised by you or by your duly constituted legal representative, Hotmart Company may ask for the information or proof necessary of your identity, in order to avoid fraud and to guarantee your privacy, so that your personal data is not shared to those with no authorization for such.
- 9.8 We will attend to your requests within a reasonable period, in accordance with the applicable legislation, remembering that we shall only respond to some requests after having received the confirmations provided for above.
- 9.9 In certain cases, such as when your request is particularly complex or when we receive a high volume of requests at the same time, our response may not be as quick as we would like it to be. On these occasions, we will always keep you informed and up to date with the progress of your request.
10. SECURITY
-
10.1
Security Measures. Hotmart Company employs security, technical and organizational measures necessary to protect the personal data processed. The efforts aim to mitigate the risk of the destruction, accidental or illegal loss, alteration, disclosure or unauthorized access or any other form of illegal or unauthorized processing. To this end, Hotmart Company has rigid controls of restricted access, based on levels of privilege, to the information technology systems to protect the personal data against any security incident. For more information, access the
Cybersecurity Policy.
-
10.1.1 Although Hotmart Company implement these measures to minimize the risk of security incidents and undue access, it is not possible to guarantee the absolute security of your data, especially against attacks perpetrated by ill-intentioned persons, who may be highly sophisticated and innovative, with techniques and methods unknown up to that point, even with the best information security tools.
-
10.1.2 The security of your data will also depend on the adoption of reasonable measures by you in the use of your devices and software.
11. PROCESSING PERSONAL DATA OF CHILDREN
- 11.1 Personal Data of Children. Hotmart Company does not collect nor consciously request personal data of children under the age of 13. If we become aware that personal data of a child under the age of 13 has been collected, we will cancel the account set up on the Platform and will exclude the personal data, only keeping personal data we have with the objective of avoiding any new attempt at registration.
12. CONTROLLER CONTACT INFORMATION
For Users located in the USA:
Teachable, Inc. 470
Park Avenue South, 6th Floor
New York, New York 10016
For Users located in Brazil:
Launch Pad Tecnologia, Serviços e Pagamentos Ltda.
Avenida Assis Chateaubriand, nº 499, Bairro Floresta
CEP 30.150-101
Belo Horizonte, Minas Gerais, Brazil
For Users located in the European Union:
Hotmart B.V.
Spuistraat, 168
1012 VT
Amsterdam, The Netherlands
To speak with the DPO of Hotmart Company, use this form.