Privacy Policy

The Coding Collective
Operated by Codespark LLC
30 N Gould St, Sheridan, Wyoming 82801, USA

Last Updated: May 2026
Effective Date: May 2026

1. INTRODUCTION

The Coding Collective (“TCC,” “we,” “our,” or “us”), operated by Codespark LLC, is committed to protecting your privacy and ensuring transparency about how we collect, use, process, and protect your personal data.

This Privacy Policy explains:

What information we collect
How we use that information
Who we share it with
How long we keep it
Your privacy rights and how to exercise them
How we protect your data
How to contact us regarding your privacy

This Privacy Policy applies to all services offered by TCC, including:

Developer Success Program (mentorship, platform access, tokens)
Digital Products & Consulting Services
Our website (thecodingcollective.net)
Our platform and associated tools

Important: This Privacy Policy is separate from and complements our Terms and Conditions. If there is any conflict, the more protective provision for your privacy will apply.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

A. Account Registration & Profile Information

When you create an account or sign up for our services, we collect:

Full name
Email address
Phone number
Mailing address (optional)
Professional title and company/organization
LinkedIn profile URL (if provided)
Skills and experience summary
Educational background
Preferred timezone and communication language

B. Developer Success Program Information

For the Developer Success Program specifically, we collect:

Your development background and expertise level
Career goals and challenges
Learning objectives and areas of focus
Availability for mentorship sessions
Technical stack and tools you use
Portfolio or work samples you choose to share
Performance metrics and progress tracking data
Feedback and session notes from mentors

C. Digital Products & Consulting Information

For consulting engagements, we collect:

Project details and business objectives
Company/organization information
Technical requirements and specifications
Existing systems, databases, and code repositories
Performance metrics and success criteria
Timeline and budget parameters
Team composition and contact information

D. Communication Information

When you contact us via email, chat, phone, or contact forms, we collect:

Message content
Attachments (documents, code snippets, images)
Communication timestamps
Recipient and sender identifiers

E. Payment Information

When you purchase services, we collect:

Billing name and address
Payment method information (credit card, bank account details)
Invoice and transaction history
Purchase dates and amounts

Important: Payment card information is processed securely through PCI-DSS compliant payment processors. TCC does not store full credit card numbers, expiration dates, or CVV codes on our servers.

2.2 Information Collected Automatically

We automatically collect usage data, device information, IP address and location data, cookies, and analytics data when you use our platform.

2.3 Information from Third Parties

We may receive information from payment processors, service providers, publicly available sources, and referrals.

3. HOW WE USE YOUR INFORMATION

We use your information for:

Service Delivery: Creating and maintaining your account, delivering mentorship, providing platform access, managing token consumption, delivering consulting services, processing payments, and customer support
Communication: Sending service-related updates, transactional emails, support responses, program updates, and educational content
Marketing and Business Development: Sending newsletters, promoting new services, conducting surveys, featuring testimonials, targeted marketing, and identifying partnership opportunities
Analytics and Service Improvement: Analyzing user behavior, improving features, troubleshooting issues, personalizing experience, developing new features, and performance monitoring
Fraud Prevention and Security: Detecting fraud, enforcing agreements, protecting against abuse, security monitoring, and investigations
Legal Compliance: Meeting legal obligations, responding to legal requests, audit and accounting, and contract enforcement

4. LEGAL BASIS FOR PROCESSING (GDPR)

For users in the European Union, we process personal data under the following legal bases:

Service delivery and contract fulfillment: Contract (Article 6(1)(b))
Payment processing and invoicing: Contract & Legal obligation
Fraud prevention and security: Legitimate interest
Customer support: Contract & Legitimate interest
Marketing communications (with consent): Consent
Analytics and service improvement: Legitimate interest
Legal compliance: Legal obligation
Mentor-customer matching: Contract

5. HOW WE SHARE YOUR INFORMATION

We do NOT sell, rent, or trade your personal data to third parties.

We share information with service providers including:

Mentors and team members (for service delivery)
Payment processors (for billing)
Cloud hosting providers (for infrastructure)
Communication platforms (for email, chat, video)
Analytics platforms (for usage tracking)
Legal and compliance entities (when required by law)

All service providers are contractually bound by Data Processing Agreements requiring them to protect your data and process it only on our instructions.

We may disclose information when required by law, in response to legal processes, to protect against fraud or abuse, or to enforce our agreements.

6. DATA RETENTION

We retain data for different periods depending on type:

Account information: Duration of relationship + 3 years
Payment/billing records: 7 years
Mentorship notes: 3 years after program completion
Platform usage logs: 12 months
Email communications: 3 years
Device/IP logs: 90 days
Support tickets: 2 years

You can request account deletion anytime. Upon request, we will delete your account profile within 30 days, though some data may be retained if required by law.

To request deletion, email info@thecodingcollective.net with “Account Deletion Request” in the subject line.

7. DATA SECURITY

We implement comprehensive security measures including:

Encryption in transit (TLS 1.2+) and at rest (AES-256)
Secure authentication and multi-factor authentication (MFA)
API security with OAuth 2.0
Network security, firewalls, and intrusion detection
Role-based access control with least privilege principle
Access logging and monitoring
Regular security audits and penetration testing
Vulnerability scanning and immediate patching
Employee security training and confidentiality agreements
Automated and manual testing
Incident response procedures
Automated daily encrypted backups with geographic redundancy

You are responsible for keeping your password confidential and notifying us of unauthorized access. While we implement industry-standard security, no system is 100% secure.

8. COOKIES AND TRACKING

We use cookies for essential functions, analytics, and marketing purposes.

Essential/Functional Cookies:

session_id: Maintains login
platform_token: API authentication (24 hours)
user_preferences: UI settings (1 year)
csrf_token: Security (session)

Analytics Cookies:

Google Analytics: Traffic tracking (2 years)
Mixpanel: Event tracking (13 months)
Hotjar: Session recording (with consent)

You can manage cookies through your browser settings. You can opt-out of analytics but essential cookies cannot be disabled.

We use pixels, web beacons, local storage, and device fingerprinting for fraud prevention.

9. INTERNATIONAL DATA TRANSFERS

Your data is primarily stored on U.S.-based servers (AWS, Google Cloud).

For EU users, we transfer data using:

Standard Contractual Clauses (SCCs)
Data Processing Agreements (DPAs)
Privacy Shield or adequacy decisions where applicable

You have the right to understand transfer mechanisms and object to transfers, though this may limit service access.

10. CHILDREN’S PRIVACY

Our services are not directed to individuals under 16 years old. We do not knowingly collect information from children under 16.

If you are a school or institution using our services for students, you must obtain parental/guardian consent and manage student data appropriately.

11. YOUR PRIVACY RIGHTS

GDPR Rights (EU/EEA users):

Right to Access: Request a copy of your data (30 days, free)
Right to Rectification: Correct inaccurate information (30 days, free)
Right to Erasure: Request deletion (30 days, free, with exceptions)
Right to Restrict: Limit how we use your data (30 days, free)
Right to Data Portability: Get data in machine-readable format (30 days, free)
Right to Object: Opt-out of processing (30 days, free)

CCPA Rights (California users):

Right to Know: Request what data we collect (45 days, free)
Right to Delete: Request deletion (45 days, free)
Right to Correct: Request corrections (45 days, free)
Right to Opt-Out: No sale of personal data (immediate, free)
Right to Limit Use: Restrict sensitive info use (45 days, free)

To exercise your rights, email info@thecodingcollective.net with “Privacy Request” in the subject line. We will verify your identity. We will not discriminate against you for exercising rights.

You can opt-out of marketing emails anytime by clicking unsubscribe or emailing info@thecodingcollective.net.

12. THIRD-PARTY LINKS AND SERVICES

This Privacy Policy does not apply to external websites, third-party services, social media, or partner websites. When you visit external sites, you are subject to their privacy policies.

If you authorize us to connect with third-party services (GitHub, Slack, etc.), we will request explicit permission and only use necessary data.

13. CALIFORNIA PRIVACY RIGHTS (CPRA)

We may collect sensitive personal information including SSNs, financial accounts, precise geolocation, racial/ethnic origin, religious beliefs, union membership, and genetic data. We limit use to what is necessary to provide services.

We do not currently use automated decision-making that produces legal effects. If we implement such technology, we will notify you in advance.

14. UPDATES TO THIS POLICY

We may update this policy to reflect changes in our practices, legal changes, service updates, or improved transparency.

We will notify you by posting updates on our website and sending email for material changes.

Your continued use constitutes acceptance. If you disagree, you can discontinue use or request account deletion.

15. CONTACT US

For privacy questions or to exercise your rights:

Email: info@thecodingcollective.net

Mailing Address:
Codespark LLC
30 N Gould St
Sheridan, Wyoming 82801
USA

Response Timeframe: We acknowledge inquiries within 5 business days and provide substantive responses within 30 days.

All privacy requests, data subject requests (GDPR), cookies and tracking questions, data security concerns, and general inquiries can be directed to:
info@thecodingcollective.net

16. ADDITIONAL INFORMATION

Your Rights Summary by Jurisdiction:

GDPR (EU/EEA): Access, Rectify, Erase, Restrict, Port, Object, Challenge automated decisions
CCPA (California): Know, Delete, Correct, Opt-out of sale, Limit use, Appeal
CPRA (California): Same as CCPA + opt-out of profiling
LGPD (Brazil): Access, Rectify, Delete, Port, Object, Human review
PIPEDA (Canada): Access, Correct, Delete, Withdraw consent

For current service provider list, request our “Service Provider Registry” from info@thecodingcollective.net

For Data Processing Agreements, contact info@thecodingcollective.net

17. ACKNOWLEDGMENT AND CONSENT

By using The Coding Collective’s services, you acknowledge that you have read and understood this Privacy Policy and agree to:

Our collection, use, and sharing of your personal data as described
International data transfers
Cookie use
Data sharing with service providers

You may withdraw consent anytime by contacting info@thecodingcollective.net or discontinuing service use.