Privacy Policy
Last updated: November 9, 2026
Our students are children aged 7 to 17, so this page is mainly about how we handle your child's data. In short: what we collect on digitalartschool.fun and in lessons, why, and what you can do about it.
Who we are
Digital Art School is the brand of our online school, and LUMO is the brand of our courses. Your data is controlled by George Ryzhenko, an individual who works under the Digital Art School brand. He decides why and how the data is processed.
For any question about your data, email info@digitalartschool.fun. A postal address for correspondence is available on request.
Parental consent
A parent or legal guardian books the child's trial lesson. When booking, they see two checkboxes:
- required: consent to the processing of the child's data, the recording of lessons and the processing of recordings by AI services as described in this policy;
- optional: permission to publish the child's work on our website and social media, without the child's last name or contact details.
Without the second checkbox, we do not publish the child's work. We do not publish lesson recordings without the parent's separate consent.
You can withdraw either consent at any time by emailing info@digitalartschool.fun. If you withdraw permission to publish, we will take down your child's work that is already published. If you withdraw the required one, we will stop recording lessons and processing your child's data, and delete it at your request. We will discuss with you how to continue the lessons.
Your child's data
Some data comes from the parent; the child creates the rest in lessons and in the student's account. We collect only what lessons require:
- first and last name, age or date of birth, time zone, learning goals;
- video and audio of one-to-one Zoom lessons, their transcripts and summaries;
- homework, 3D projects, text and voice messages in the AI chat of the student's account; voice messages are transcribed by OpenAI.
We do not ask for a child's address, school, grade or health information. We do not share children's data with ad networks or use it for advertising. If a child posts a comment on our blog, their name and comment are visible to all readers.
We process lesson recordings and transcripts with AI services to prepare lesson summaries, homework, reports for parents and search across lessons. Recordings are available to the student, the parent, the teacher, the curator and the school administrator.
For children under 13 in the US (COPPA): a parent can review their child's data at any time, ask us to delete it and refuse further collection. Parents of all our students have the same rights. Email info@digitalartschool.fun, and we will ask you to confirm that you are the parent.
Parent and website visitor data
- Website inquiries: your name, phone number, your question, and the page, website and ad tag you came from. We use them to get back to you and find the right course.
- Enrollment and lessons: contact details, correspondence on WhatsApp, Telegram and by email, the schedule, payment details. We need them to run lessons under our agreement.
- Website visits: IP address, device and browser, pages viewed. Google Analytics and our server logs collect this, so we can see how the website performs and protect it.
- Blog comments: your name, email and comment text. Your name and comment are visible to all readers.
You are not required to give us your data, but without your contact details we cannot reply to your inquiry, and without the student's details we cannot run lessons.
Legal bases
| What we do | Legal basis |
|---|---|
| Replying to inquiries | Your request before a contract |
| Lessons, student account, contact with the parent | Contract with the parent |
| Recording lessons and processing recordings with AI services | Contract with the parent and the parent's consent given when booking |
| Publishing a child's work | Parent's separate consent |
| Website analytics and server logs | Our legitimate interest |
| Blog comments | Your consent: you choose to post a comment |
| Keeping payment records | Legal obligation |
International transfers
Data is processed by services in different countries, including the US, the EU and others. Our teachers and team also work from different countries. We transfer data from the EU to services in the US and other countries using the mechanisms those services offer: EU Standard Contractual Clauses or the EU-US Data Privacy Framework. We will send you a copy of the terms on request.
How long we keep data
| Data | Period |
|---|---|
| Lesson videos | While the child is studying, for no more than 6 years. We delete them earlier at the parent's request |
| Lesson transcripts and summaries, homework, 3D projects, AI chat messages | 10 years. At the parent's request, we remove the child's personal data from them |
| Inquiries, parent data, correspondence | As long as we need them to work with you; deleted at your request |
| Blog comments | While the comment is published or until you ask us to delete it |
| Server logs (IP addresses, inquiry data) | Up to 2 years, to protect the website and recover lost inquiries |
| Payment records | As long as our accounting requires |
| Google Analytics data | Up to 14 months |
Your rights
You can ask what data we hold about you and your child, get a copy, correct it, delete it, restrict its processing, receive it in a machine-readable format, object to processing, and withdraw your consent. Email info@digitalartschool.fun. It is free, and we reply within the time limits set by law.
You also have the right to lodge a complaint with the data protection authority in your country.
Changes
We publish each new version of this policy on this page and update the date at the top.