1. Who we are
This Privacy Notice describes how Spicy Behavioral Consulting (trading as "Spicy Behavioral Institute™", "we", "us", or "our") collects and uses personal data when you visit our website, create an account, purchase products, or otherwise interact with our services. Spicy Behavioral Consulting is the data controller responsible for your personal data.
2. Categories of personal data we collect
- Account data: name, email address, login credentials, role (BCBA, RBT, parent, educator, business owner).
- Order and shipping data: billing and shipping addresses for printed products, order history, course/resource entitlements.
- Communications: support requests, community posts, replies, inquiries, and feedback you submit.
- Usage and device data: pages visited, IP address, browser type, device identifiers, and similar telemetry collected via cookies or our analytics.
- Marketing preferences: email subscription state and unsubscribe history.
We do not store full payment card details. Payment information is collected and processed by our payment providers (see Section 5).
3. How we use your personal data
- Create and manage your account and entitlements (contract performance).
- Deliver digital products, course access, printed materials, and customer support (contract performance).
- Send transactional emails such as receipts, course updates, and shipping notices (contract performance).
- Improve our content, courses, and platform; detect and prevent fraud, abuse, and security incidents (legitimate interests).
- Send marketing communications where you have opted in or as otherwise permitted by law (consent or legitimate interests).
- Comply with legal, tax, and regulatory obligations (legal obligation).
4. Legal basis for processing
We rely on (a) performance of a contract with you, (b) our legitimate interests in operating and improving our services, (c) your consent (which you may withdraw at any time), and (d) compliance with our legal obligations.
5. Who we share data with
- Payment providers (Stripe) — process your payment, billing, and where applicable sales tax and invoicing. They receive the data necessary to process your order (name, email, billing/shipping address, payment details) and process it under their own privacy policies.
- Hosting, database, email, and analytics providers acting as our processors to operate the site, store data, send transactional and marketing email, and measure usage.
- Professional advisers (legal, accounting) where reasonably necessary.
- Authorities or third parties where required by law, court order, or to protect our rights, users, or the public.
6. International transfers
Some of our providers are located outside your country of residence, including the United States and the European Economic Area. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
7. Data retention
We retain personal data only as long as needed for the purposes described above, to provide the service, to comply with tax and accounting laws (typically up to 7 years for order records), and to resolve disputes. When no longer needed, data is deleted or anonymized.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You may also lodge a complaint with your local data protection authority. To exercise any right, email us at hello@spicybehavioralinstitute.com. We respond within one month.
9. Security
We use appropriate technical and organizational measures including encryption in transit, access controls, role-based permissions, and audit logging. No system is perfectly secure; please use a strong, unique password.
10. Cookies
We use cookies and similar technologies that are strictly necessary to run the site (authentication, security, session state) and, where you consent, analytics cookies that help us understand how the site is used. You can manage cookies through your browser settings.
11. Children
Our services are not directed to children under 16, and we do not knowingly collect personal data from them.
12. Changes to this notice
We may update this notice from time to time. Material changes will be highlighted on this page with a new "Last updated" date.
13. Contact
Spicy Behavioral Consulting
Email: hello@spicybehavioralinstitute.com