GDPR Privacy Notice

Cam Theory University · camtheoryuniversity.com · Effective Date: January 1, 2026 · Last Updated: May 2026

This notice supplements our main Privacy Policy and explains how Cam Theory University collects, uses, stores, and protects your personal data in compliance with the General Data Protection Regulation (GDPR) for individuals located in the European Economic Area (EEA) and the United Kingdom (UK).

By using our website or services you consent to the practices described in this notice.

Data Controller

Cam Theory University
Email: [email protected]
Website: camtheoryuniversity.com
Governed by the laws of the State of Texas, United States

Legal Basis for Processing

1. Contractual Necessity

We process your data to fulfill our contractual obligations when you purchase a program, book a session, or enroll in any of our services.

2. Legitimate Interests

We process your data based on our legitimate business interests including improving our services, conducting marketing activities, preventing fraud, and analyzing site performance. You have the right to object to this processing.

3. Consent

We process your data based on your explicit consent when you subscribe to our email list or agree to cookies and tracking technologies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

4. Legal Obligation

We process your data to comply with legal requirements including tax obligations and responses to law enforcement or regulatory requests.

What Personal Data We Collect

  • Identity and Contact Data — full name, email address, phone number, billing address
  • Financial Data — payment information processed securely through Stripe or PayPal. We do not store full card details.
  • Technical Data — IP address, browser type, device type, cookies and tracking identifiers
  • Usage Data — pages visited, time on site, program engagement metrics
  • Marketing Data — email preferences and consent status

Your Rights Under GDPR

Right to Access

You may request a copy of the personal data we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary, you withdraw consent, or it has been unlawfully processed. We may retain data if required by law or for legitimate business purposes such as tax records.

Right to Restrict Processing

You may request that we limit how we use your data in certain situations such as when you contest its accuracy or object to processing while we verify legitimate grounds.

Right to Data Portability

You may request your personal data in a structured, machine-readable format to transfer to another provider.

Right to Object

You may object to processing for direct marketing at any time using the unsubscribe link in our emails or by contacting us directly.

Right to Withdraw Consent

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.

Right to Lodge a Complaint

If you believe we have violated your privacy rights you may lodge a complaint with your local data protection authority.

How to Exercise Your Rights

  • Email: [email protected]
  • Subject line: GDPR Data Request
  • Include your full name, email address, and the right you wish to exercise

We will respond within 30 days. We may request additional information to verify your identity.

Data Retention

  • Account data — retained while active plus up to 7 years after closure
  • Payment records — retained for up to 7 years for compliance
  • Marketing data — retained until you unsubscribe or request deletion
  • Analytics data — retained in anonymized or aggregated form

International Data Transfers

Cam Theory University operates from the United States. When we transfer your personal data outside the EEA or UK we ensure appropriate safeguards are in place including Standard Contractual Clauses approved by the European Commission and data processing agreements with all third-party processors.

Third-Party Service Providers

  • Payment processors — Stripe, PayPal
  • CRM and marketing — GoHighLevel
  • Advertising — Meta Pixel
  • Cloud infrastructure — AWS, Cloudflare

All processors are contractually required to implement appropriate security measures and comply with GDPR requirements.

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or significantly affects you.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms we will notify the relevant supervisory authority within 72 hours where required by law and notify affected individuals without undue delay.

Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data please contact us immediately.

Changes to This Notice

We may update this notice from time to time. Your continued use of our services after changes are posted constitutes acceptance of the updated notice.

Contact Us

Cam Theory University
Email: [email protected]
Subject line: GDPR Inquiry
Please allow 1 to 3 business days for a response.

Cam Theory University © 2026. All Rights Reserved.