LEGAL
Privacy Policy
Last updated: October 13, 2026
This policy explains how Sahair Inc dba Vlight Extensions ("we", "us") handles personal information when you use Vlight Academy. We are the data controller for your information.
Information we collect
- Account details: name, email address and password (stored encrypted, never visible to us).
- Course data: enrollment status and lesson progress.
- Sign-in data from Google if you choose Google sign-in (name and email only).
- Purchase records. Payments are processed by our payment provider; we never receive or store your full card number.
- Basic technical data such as IP address and browser type, used for security.
How we use it and legal basis
- To provide the course you purchased (performance of a contract).
- To secure accounts and prevent fraud (legitimate interests).
- To send account, receipt and course emails (contract). We only send marketing email with your consent, and every marketing email includes an unsubscribe link (CAN-SPAM).
- To meet tax and legal obligations (legal obligation).
Sharing
We do not sell or share your personal information for cross-context behavioral advertising. We share data only with service providers that host our app, deliver email, stream video (Vimeo, with Do Not Track) and process payments, under contracts that protect your data, or when required by law.
International transfers
We are based in the United States. If you are in the EU, UK or another region, your data is transferred to the US under appropriate safeguards such as Standard Contractual Clauses.
Retention
We keep account data while your account is active and delete it within 30 days of a deletion request, except records we must keep for tax or legal reasons (generally up to 7 years).
Your rights
Everyone: you may ask to access, correct, download or delete your data at any time.
EU/UK (GDPR): you also have the right to restrict or object to processing, to data portability, to withdraw consent, and to complain to your local data protection authority.
California (CCPA/CPRA) and other US states: you have the right to know, delete and correct personal information, to opt out of sale or sharing (we do neither), to limit use of sensitive information, and not to be discriminated against for exercising your rights. We honor Global Privacy Control signals.
To make a request, email vlightextensions@gmail.com. We respond within 30 days (45 days where state law allows) and may need to verify your identity.
Children
The academy is intended for adults 18 and older. We do not knowingly collect information from children under 13 (COPPA) or under 16 in the EU. Contact us and we will delete any such data.
Security
We use encrypted connections, encrypted passwords and access controls so only you and authorized staff can see your data.
Changes
We will post changes here and update the date above. Material changes will be emailed to enrolled students.
Contact us
Sahair Inc dba Vlight Extensions
200 South Andrews Ave #504, Fort Lauderdale, FL 33301, USA
vlightextensions@gmail.com