Privacy policy
Last updated: October 12, 2026
I collect as little as possible, I never sell your data, and I do not track you. This page explains exactly what I use and why.
Who is responsible
The controller of your personal data is:
- Company
- Crofte Studio S.à r.l.-S
- Registered address
- 43 rue d'Anvers, L-1130 Luxembourg, Luxembourg
- Trade and Companies Register
- RCS Luxembourg B310079
- Share capital
- 1,000 euros
- VAT number
- LU37891138
- Responsible for publication
- Geoffrey Crofte
What I use, and why
When you simply read
Browsing the public pages (home, courses, pricing, glossary) needs no account. I do not use analytics, advertising or tracking tools, and I do not build a profile of you.
Like any website, my hosting provider records technical information when a page is requested, such as the IP address, the date and time and the page. This information is used for security and to keep the service running, not to identify you.
When you create an account
- Your first name and your email address, given when you sign up. The email address is used to send you sign-in links and to identify your account; the first name, to greet you.
- What you choose to add to your profile, if anything: your last name, a profile picture and your field of work. Only you can see them, except your name on a certificate you earn (see below). Your picture is stored privately and shown only to you.
- Your learning progress: which lessons you started or completed, and when, and your quiz results. It powers your dashboard and lets you pick up where you left off. I also record the first time you open each module, even if you mark nothing as done.
- Your notes, if you take any. Only you can see and search them.
- Your certificates, once you earn one: the course, the date, and the first and last name shown on it. Each certificate has a public page, at an address that cannot be guessed, so that people you share it with (for example on LinkedIn) can check it. That page shows only what the certificate states, and nothing else about your account.
- Your language and display preferences, when you choose them.
I use this data to provide the service you asked for. This is the legal basis: carrying out my contract with you.
When you buy lifetime access
Payment is handled by Stripe. I receive the confirmation of payment and the details needed for the receipt and for my accounting obligations. I never receive or store your card details.
Before you pay, I also record your agreement to the terms and your request to start straight away, with its date. Once you have paid, I email you a confirmation of the purchase quoting this agreement, through Brevo. I also note on the purchase the first time you open a paid module, and what you opened: this is when your access started, which ends the right of withdrawal. Together, they show what was agreed and when it took effect.
When you write to me
When you use the contact form (to request a workshop, ask about team access, report an accessibility problem or ask a question), I receive what you type in it: your name, your email address, and the details you choose to give, such as your organisation, the number of people or your message. If you are signed in, the request is also linked to your account.
I use these details only to answer you and to prepare what you asked for, such as a quote. This is the legal basis: taking the steps you asked for before a possible contract, or my legitimate interest in answering the questions people send me. I never add you to a mailing list.
To limit abuse, the form also keeps a scrambled version of your IP address (a keyed hash, which cannot be turned back into the address) for one day. Your request is sent to my own mailbox through Brevo, an email service based in France.
Cookies and local storage
Ramp Up uses only what is strictly necessary, so there is no cookie banner.
- A session cookie, set when you sign in, keeps you signed in. It is required for your account to work.
- Your theme choice, if you pick light or dark mode, is kept in your browser’s local storage. It never leaves your device.
Where your data is stored
- Website and application hosting: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States
- Accounts and learning data: Supabase Pte. Ltd., Singapore (https://supabase.com); data stored in Frankfurt, Germany (European Union)
- Contact form emails: Brevo SAS, Paris, France (https://www.brevo.com)
- Payments: Stripe Payments Europe, Limited, Dublin, Ireland (https://stripe.com)
Your account and learning data are stored in Frankfurt, Germany, in the European Union. Some of these providers are based outside the European Union. Transfers of personal data rely on the safeguards provided by the GDPR, such as the European Commission’s standard contractual clauses.
How long I keep it
- Your account and progress: as long as your account exists. When you delete your account, they are deleted too.
- Payment records: as long as accounting law requires. If you delete your account, I keep the record of the payment, of your agreement and of the start of your access without your account details: it can only be linked back to you through the payment held by Stripe.
- Contact requests: as long as needed to answer you and follow up, and at most three years after our last exchange. The scrambled IP address is cleared after one day.
- Technical logs: for a short period, under my hosting providers’ own rules.
Your rights
Under the GDPR, you can ask to access, correct, export or delete your personal data, and object to how I use it. Write to me and I answer within one month.
My address:
The email is pre-filled: complete it and send it from your own email application.
You also have the right to lodge a complaint with the Commission nationale pour la protection des données (CNPD), the Luxembourg data protection authority.