At Creative Courage, we take your privacy seriously. This policy explains what personal data we collect, how we use it, and what rights you have. We are committed to handling your information with care, transparency, and respect — the same values we bring to everything we do.
Who We Are
Creative Courage is operated by Sheikh Consulting, LLC, a company registered in the state of Minnesota, United States. The business is co-founded and co-operated by Ma'raj Sheikh (Minnesota, USA) and Marleen Häring (Barcelona, Spain).
We serve clients primarily in the United States and the European Union, and operate exclusively online.
For privacy-related questions, you can reach us at: [email protected] / [email protected]
What Data We Collect
We collect personal data in the following situations:
- Application form (Google Forms): Name, email address, and any information you share in your application responses.
- Payment processing (Stripe): Payment details including name, billing address, and card information. Note: we never store your card details directly — these are handled securely by Stripe.
- Email newsletter: When you subscribe, we collect your email address and, optionally, your name.
- Direct email contact: Any information you voluntarily share when contacting us.
How We Use Your Data
We use your personal data only for the following purposes:
- To review and respond to your program application
- To process payments for our programs
- To deliver program materials, session links, and onboarding information
- To send you our newsletter (only if you have subscribed)
- To respond to your enquiries and support requests
- To comply with our legal obligations
We will never sell, rent, or share your personal data with third parties for marketing purposes.
Third-Party Services
We use the following third-party tools to operate our business. Each has its own privacy policy:
- Google Forms / Google Workspace — for application processing. Google Privacy Policy →
- Stripe — for secure payment processing. Stripe Privacy Policy →
- Email newsletter platform — for newsletter delivery.
Legal Basis for Processing (GDPR)
If you are located in the European Union or EEA, we process your personal data on the following legal bases:
- Contract performance — to deliver the program or service you have enrolled in
- Legitimate interests — to respond to enquiries and operate our business
- Consent — for newsletter subscriptions, which you can withdraw at any time
- Legal obligation — where required by applicable law
How Long We Keep Your Data
- Application data is retained for up to 12 months after your application is submitted
- Payment and transaction records are retained for 7 years for legal and accounting purposes
- Newsletter subscriptions are retained until you unsubscribe
- Email correspondence is retained for up to 3 years
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right to access — request a copy of the data we hold about you
- Right to rectification — ask us to correct inaccurate data
- Right to erasure — ask us to delete your data ("right to be forgotten")
- Right to restrict processing — ask us to limit how we use your data
- Right to data portability — receive your data in a portable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — unsubscribe from newsletters at any time
To exercise any of these rights, contact us at [email protected] / [email protected]. We will respond within 30 days.
Cookies
This website currently does not use cookies or tracking technologies. If this changes in the future, we will update this policy and add a cookie consent notice accordingly.
Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Payments are processed exclusively through Stripe, which is PCI-DSS compliant.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.
Governing Law & Jurisdiction
This Privacy Policy is governed by the laws of the State of Minnesota, United States, where Sheikh Consulting, LLC is registered and the business is primarily operated.
For clients based in the European Union, applicable EU data protection laws — including the General Data Protection Regulation (GDPR) — apply in full. You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.
For clients based in the United States, applicable federal and Minnesota state privacy laws apply.
Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
[email protected] / [email protected]
Creative Courage · Sheikh Consulting, LLC · Minnesota, USA