IcyMusic
Last updated: 10 September 2026

This Privacy Policy explains how IcyMusic, operated by LeoLogistics OÜ (registry code 17157533), Tallinn, Estonia (“IcyMusic”, “we”, “us” or “our”), collects, uses, stores, shares and protects personal data when you visit our website, create an account, purchase or access a course, contact us, or otherwise interact with our services.

For the purposes of the EU General Data Protection Regulation (“GDPR”), LeoLogistics OÜ is generally the data controller for personal data processed in connection with IcyMusic. Our contact email for privacy matters is [email protected].

This Privacy Policy explains our processing practices. Where applicable law requires your consent (for example, for certain marketing or non-essential cookies), we will request that consent separately.

1. Personal Data We Collect

Information you provide directly

· Name and email address.

· Account, profile and enrolment information.

· Billing details and information needed to process a purchase.

· Country or location information that you provide or that is inferred at a general level for payment, tax or fraud-prevention purposes.

· Messages, support requests, feedback, survey responses, comments or other content that you voluntarily submit.

· Marketing preferences and consent choices.

Course and account information

· Courses purchased or enrolled in.

· Lesson progress, completion information and learning activity.

· Login, authentication and account-access information.

· Interactions with course content and platform features.

Information collected automatically

· IP address and approximate location.

· Browser, device type, operating system and language settings.

· Referring source, pages viewed, timestamps, session information and interactions with our website.

· Cookie identifiers, advertising identifiers and similar technical information.

2. How We Use Personal Data

We may use personal data for the following purposes:

· To create, authenticate and manage your account.

· To process purchases, enrolments and payments.

· To provide access to courses and digital content, including lifetime access where offered.

· To track course progress and provide learning functionality.

· To provide customer support and respond to enquiries.

· To send transactional or service-related messages about your account, purchase or course.

· To operate, secure, troubleshoot and improve our website and services.

· To measure website, course and advertising performance.

· To understand user behaviour and improve our course, website, offer and marketing.

· To prevent fraud, abuse, security incidents and misuse.

· To comply with legal, accounting, tax and regulatory obligations.

· To send marketing communications where permitted by law.

· To create and measure advertising audiences and campaigns where permitted by law and subject to applicable consent requirements.

3. Legal Bases for Processing

Performance of a contract

· We process personal data where necessary to take steps at your request, complete a purchase, create your account, provide access to a course, manage your enrolment or otherwise deliver services you requested.

Legal obligations

· We process and retain certain information where necessary to comply with accounting, taxation, consumer-protection and other legal obligations.

Legitimate interests

· We may process personal data for legitimate interests such as operating and improving our services, protecting our business and users, preventing fraud, analysing service performance and maintaining appropriate business records, where those interests are not overridden by your rights and freedoms.

Consent

· Where consent is required, we rely on your consent for activities such as certain marketing communications, analytics cookies, advertising cookies and personalised advertising. You may withdraw consent at any time.

4. Accounts, Courses and Thinkific

Our website and courses are hosted and delivered using Thinkific. For certain learner, account and course data processed through the Thinkific platform on our instructions, Thinkific acts as a processor/service provider.

Thinkific may process information necessary for account creation, authentication, course delivery, progress tracking, technical support, security and related platform functions.

Thinkific may also process certain information for its own legally permitted purposes as described in its own privacy documentation. You should review Thinkific’s privacy information for details about its independent processing activities.

5. Payments

Payments are processed by third-party payment providers made available through Thinkific or other payment methods displayed at checkout.

These providers may collect payment-card details, billing information, transaction details and fraud-prevention information. We generally do not receive or store your complete payment-card number.

Payment providers process personal data under their own privacy notices and security standards.

6. Email and Marketing Communications

We may send transactional messages that are necessary to provide the service you requested, such as purchase confirmations, account information, course-access instructions, password or security messages and important service updates.

Where permitted by law, we may also send marketing communications about IcyMusic courses, content, offers and related services.

Where consent is required, marketing messages are sent only after you have given the required consent.

You may unsubscribe from marketing emails at any time using the unsubscribe link in the message or by contacting [email protected]. Unsubscribing from marketing will not stop essential service-related communications.

7. Cookies and Similar Technologies

We use cookies and similar technologies to make the website function, remember preferences, understand usage and, where enabled, measure and optimise advertising.

Essential cookies may be used without consent where they are strictly necessary for functions such as authentication, security, checkout, course access and session management.

Where required by applicable EU law, analytics, advertising and other non-essential cookies or similar technologies are activated only after you provide consent.

You can manage your choices through our cookie controls where available and through your browser settings. Refusing non-essential cookies should not prevent you from accessing the core service, although some optional features may work differently.

8. Analytics and Advertising Technologies

We may use website analytics and advertising tools to understand how visitors interact with IcyMusic and to measure campaign performance.

We may use Meta technologies, such as the Meta Pixel, to measure events such as page views, checkout activity and purchases, create or optimise advertising audiences, and understand whether our advertising leads to conversions.

Where required by law, Meta Pixel and other non-essential advertising technologies are used only after you provide the required consent.

Advertising and analytics providers may receive identifiers, device and browser information, IP address, website activity and event information in accordance with their own privacy policies.

9. Sharing Personal Data

We may share personal data with service providers only where reasonably necessary for them to provide services to us, including learning-platform providers, payment providers, hosting and infrastructure providers, email and communications providers, analytics providers, advertising platforms, security or fraud-prevention providers, and professional advisers.

We may also disclose information where required by law, regulation, court order or lawful request from a public authority, or where reasonably necessary to protect our rights, users, systems or property.

We do not sell personal data for money.

10. International Data Transfers

Some service providers may process personal data outside Estonia or the European Economic Area (“EEA”), including in Canada, the United States or other countries.

When personal data is transferred outside the EEA, we use transfer mechanisms recognised under applicable EU data-protection law where required. These may include an adequacy decision, Standard Contractual Clauses approved by the European Commission, or another lawful transfer mechanism.

Where an adequacy framework applies to a particular recipient, it may also be relied upon in accordance with applicable law.

We take reasonable steps to ensure that appropriate safeguards apply to relevant international transfers.

11. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, taking into account legal, contractual, accounting, security and operational requirements.

Account, enrolment and course-access records may be retained while your account remains active and for as long as needed to provide any lifetime-access entitlement associated with your purchase.

Accounting source documents, transaction records and related business documents may be retained for seven years from the end of the relevant financial year where required under Estonian accounting law.

Marketing-preference information may be retained until you withdraw consent, unsubscribe, object where applicable, or until it is no longer necessary for the relevant purpose.

Support communications may be retained for a reasonable period after a request is resolved where necessary for service, security, dispute-resolution or record-keeping purposes.

When personal data is no longer needed, we will delete, anonymise or otherwise securely dispose of it, unless continued retention is required by law.

12. Data Security

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

We also rely on reputable service providers that maintain their own security safeguards.

No method of internet transmission or electronic storage is completely secure, so we cannot guarantee absolute security.

13. Your Rights Under the GDPR

If the GDPR applies to you, you may have the right to request access to your personal data, correction of inaccurate or incomplete data, deletion of data, restriction of processing, data portability, and to object to certain processing.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

You have the right to object at any time to processing of your personal data for direct marketing purposes. If you object, we will stop using your personal data for direct marketing.

You may also have rights in relation to certain solely automated decisions that produce legal or similarly significant effects.

These rights may be subject to conditions, exceptions or limitations provided by applicable law.

14. How to Exercise Your Rights

To exercise an applicable privacy right, contact us at [email protected].

We may ask for information reasonably necessary to verify your identity and protect your account before fulfilling a request.

We will respond within the time periods required by applicable law.

15. Complaints and Supervisory Authority

If you have a concern about how we process personal data, please contact us first at [email protected] so we can try to resolve it.

If the GDPR applies to you, you also have the right to lodge a complaint with a competent data-protection supervisory authority, including the supervisory authority in your country of residence, place of work or place of the alleged infringement.

As an Estonian controller, our lead national supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

16. Additional Information for Canadian Users

If you are located in Canada, applicable Canadian privacy laws may provide rights to request access to personal information held about you, challenge its accuracy and request corrections where appropriate.

For commercial electronic messages sent to recipients in Canada, we seek to comply with applicable Canadian anti-spam requirements, including consent, identification and unsubscribe requirements where applicable.

You may contact [email protected] with privacy requests or concerns.

17. Children and Minors

IcyMusic is not directed specifically to young children.

If applicable law requires parental or guardian consent for the collection of personal data or for entering into a purchase or service agreement, the required involvement or consent of a parent or legal guardian must be obtained.

If you believe that personal data of a child has been provided to us in violation of applicable law, please contact [email protected].

18. Automated Decision-Making and Profiling

We do not currently make decisions about learners based solely on automated processing that produce legal or similarly significant effects.

Advertising platforms may use automated systems to determine which users are more likely to see particular advertisements. Those systems are operated by the relevant platforms and are subject to their own privacy terms.

19. External Links

Our website or course materials may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties, and we encourage you to review their privacy notices.

20. Business Transfers

If IcyMusic or LeoLogistics OÜ is involved in a merger, acquisition, restructuring, financing, sale of assets or similar transaction, personal data may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, service providers, legal requirements or data-processing practices.

The latest version will be published on our website with an updated “Last updated” date. Where required by law, we will provide additional notice of material changes.

22. Contact

IcyMusic is operated by LeoLogistics OÜ.

Registry code: 17157533

Location: Tallinn, Estonia

Privacy contact: [email protected]

This document is a practical website privacy notice for IcyMusic. Its accuracy depends on IcyMusic’s actual technical setup, cookie configuration, integrations, payment methods and marketing practices.