Who we are
Paid Media School is operated by MB Advertiai, registered at Vėtrungių g. 99, Vilnius LT-12107, Lithuania (“we”, “us”, or “our”). MB Advertiai is the controller of personal data processed for the purposes described in this policy, unless stated otherwise.
This policy explains how we collect, use, disclose, and protect personal data when you visit paidmediaschool.com, register for or access courses, purchase products or services, contact us, or subscribe to our marketing.
For privacy questions or to exercise your rights, contact info@paidmediaschool.com or write to our registered address.
Information We Collect
An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy isGenerally, you control the information you choose to provide. We also process information needed to operate the website and deliver requested services, and optional analytics or advertising information when you consent to the relevant processing.
Signup forms and email marketing. When you choose to subscribe, we collect your email address, any name or preferences you provide, and a record of your consent. With your marketing consent, we may send newsletters, blog updates, educational content, course announcements, and offers promoting additional courses. Creating an account or buying a course does not, by itself, constitute consent to marketing emails. Necessary account and course administration is processed separately, as explained under our legal bases below.
Account and course information. We process your name, email address, username, account credentials, enrolments, learning progress, and completion status. Where the relevant features are available, we also process quiz responses, assessment results, certificates, and course-related communications.
Automatic information. When you use our website, technical information may include your IP address, browser and device details, operating system, timestamps, referring page information made available by your browser, and access or error logs. With analytics consent, we measure page views and interactions within paidmediaschool.com. We do not monitor your subsequent browsing on unrelated websites. Separately, advertising providers may process information through their own services as described below; this is distinct from the scope of our own website analytics.
Purchases and Stripe payments. We use Stripe to process online payments. You provide card details directly to Stripe through its payment interface; we do not directly collect or store your full payment card number or card security code. Our website communicates with Stripe through its payment integration and receives payment notifications through webhooks. Depending on the transaction and integration, we may receive your name, email address, billing details, order amount and currency, transaction or customer identifiers, payment and refund status, and limited payment-method information such as card brand and last four digits. We use this information to fulfil orders, provide course access, administer refunds, and maintain required records.
Stripe also processes transaction, device, and security information for purposes including payment processing, authentication, fraud prevention, and compliance with its legal obligations. Its role depends on the activity and applicable terms. For details, see the Stripe Privacy Policy.
Communications and submitted content. We process enquiries, support correspondence, feedback, and any reviews or comments you choose to submit. Content submitted to an area identified as public may be visible to others together with your display name. Avoid including sensitive or unnecessary personal information in public submissions.
Analytics, advertising, and privacy preferences. Depending on your consent and the tools enabled, we may process cookie or browser identifiers, page views, traffic sources, advertising clicks, approximate location, and events such as registration, enrolment, checkout, or purchase. We also retain records of consent choices, withdrawals, and marketing opt-outs. Identifiers and event data may be personal data even where they do not contain your name.
We obtain data directly from you, from your interactions with our website, and from providers supporting payments, communications, analytics, or advertising. Advertising platforms may provide campaign and attribution reports.
If you do not provide personal data. You can browse most public pages without creating an account. If you do not provide information needed for an account, course, purchase, or support request, we may be unable to provide that service. Optional marketing and tracking consent is not a condition of enrolment or course access.
available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Why We Process Personal Data And Our Legal Bases
Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Create and manage accounts, deliver courses, maintain learning progress, and provide requested support and service messages | Performance of a contract or steps you request before entering a contract — Article 6(1)(b) |
| Process purchases, grant access, and administer refunds | Performance of a contract — Article 6(1)(b) |
| Maintain statutory accounting, tax, and compliance records | Compliance with legal obligations — Article 6(1)(c) |
| Protect accounts, prevent fraud and abuse, investigate faults, and maintain website security | Our legitimate interests in operating a reliable and secure service — Article 6(1)(f) |
| Answer general enquiries unrelated to an existing or prospective contract | Our legitimate interests in responding to people who contact us — Article 6(1)(f) |
| Send newsletters, blog updates, course announcements, and promotional or upselling emails | Consent — Article 6(1)(a) |
| Use optional analytics, advertising, remarketing, and related profiling | Consent — Article 6(1)(a) |
| Establish, exercise, or defend legal claims | Our legitimate interests in protecting legal rights — Article 6(1)(f), or a legal obligation where applicable |
Where we rely on legitimate interests, we consider the impact on your rights and interests. You may object as explained below. Legitimate interests are not used as a substitute for consent to optional tracking. Information collected on a single form may be used for different purposes under different legal bases; marketing consent is separate from information needed to provide your requested service.
Our Use Of Cookies
Cookies are small files stored on your device. Similar technologies include pixels, tags, local storage, and identifiers used to recognise a browser or measure an interaction. We refer to these collectively as cookies or tracking technologies where relevant.
Strictly necessary cookies support services you request, such as login, account security, session management, payment functionality, or remembering consent choices. We use them without cookie consent only where the applicable legal exemption is met. A cookie is not automatically necessary merely because it is a session cookie or is described by a provider as functional.
Performance and analytics cookies help us understand use of our website and improve its content and operation. These optional technologies require your prior consent.
Functional cookies support preferences or additional features, such as remembering optional choices or loading third-party media. They require prior consent unless strictly necessary to provide a service you explicitly request.
Advertising and targeting cookies measure campaigns, attribute conversions, help build remarketing audiences, and support personalised advertising. These optional technologies require your prior consent.
Affiliate marketing and social sharing. If we introduce affiliate tracking, referral identifiers may associate a referral with a registration or purchase and support commission calculation. Non-essential affiliate tracking requires prior consent. Simple social-sharing links may direct you to a platform without loading its tracking tools on our page. Where we use embedded social widgets that transmit data or use non-essential tracking when loaded, those features are subject to the relevant consent controls. The applicable provider and technology must be identified in our cookie information when introduced.
Your Cookie Choices
You may accept, reject, or choose optional categories using our consent controls. We activate optional analytics and advertising tags, including Meta and Reddit pixels, only after you give the relevant consent. You can change your choices or withdraw consent at any time using “Manage preferences” in the footer. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Refusing optional cookies does not prevent access to our core website and course services. Browsing, scrolling, creating an account, or purchasing a course does not constitute consent to optional tracking. Consent applies only to the purposes and providers you select.
You can also block or delete cookies in your browser, although blocking necessary cookies may affect login, payment, or other requested functionality. Browser settings and platform advertising opt-outs are additional controls; they do not replace our obligation to obtain consent where required.
Cookie Reference Inventory
The table below describes standard cookie families associated with WordPress and the services covered by this policy. It is a reference list, not confirmation that every entry is installed on this website. The actual names, providers, domains, purposes, and expiries depend on the deployed tools and settings and must be identified in our current cookie settings or cookie notice. A first-party cookie can still be used by a third-party service and can still require consent.
| Cookie or family | Provider / placement | Purpose and category | Documented default or expiry to verify |
|---|---|---|---|
| wordpress_test_cookie | Paid Media School / WordPress; first-party | Checks cookie support for login; necessary for the requested login process | Temporary; verify deployed expiry |
| wordpress_logged_in_[hash], wordpress_[hash], wordpress_sec_[hash] | Paid Media School / WordPress; first-party, where set | Authentication and session security; necessary for requested account access | Depends on login settings and Remember Me; verify deployed expiry |
| wp-settings-[UID], wp-settings-time-[UID] | Paid Media School / WordPress; first-party, where set | Interface preferences, especially for logged-in administrators; classification depends on the actual purpose | Verify deployed expiry |
| comment_author_[hash], comment_author_email_[hash], comment_author_url_[hash] | Paid Media School / WordPress; first-party, if comment-detail storage is enabled | Remembers comment details; optional functionality | WordPress describes a period slightly under one year; verify configuration |
| _ga | Google Analytics; first-party on the measured site | Distinguishes browser clients; analytics, consent required | Google documents a default of 2 years; configuration, renewal, and browser limits may change actual persistence |
| _ga_<container-id> | Google Analytics; first-party on the measured site | Maintains session state; analytics, consent required | Google documents a default of 2 years; configuration, renewal, and browser limits may change actual persistence |
| _gcl_*, where set | Google advertising tools; commonly first-party | Advertising attribution and conversion measurement; advertising consent required | Google describes a 90-day lifespan for this family; verify the specific cookie |
| _fbp, _fbc, where set | Meta tools; first-party identifiers on the advertiser domain | Browser or ad-click attribution, measurement, and audience matching; advertising consent required | Verify current Meta implementation and actual expiry; no site-specific period has been confirmed |
| _rdt_uuid, where set | Reddit Pixel; first-party on the advertiser domain | Browser matching and advertising attribution; advertising consent required | Verify the current Pixel and actual expiry; audience membership duration is a separate setting |
| __stripe_mid | Stripe payment integration; domain depends on checkout implementation | Payment fraud prevention; exemption assessed against the actual use | Stripe documents 1 year; verify where and whether set |
| __stripe_sid | Stripe payment integration; domain depends on checkout implementation | Payment fraud prevention; exemption assessed against the actual use | Stripe documents 30 minutes; verify where and whether set |
| Consent-preference cookies or local storage | The consent tool used on our site | Records cookie choices; necessary to implement those choices | Name and duration depend on the consent tool; disclose the actual values |
| Course, affiliate, social-widget, and embedded-media storage | The relevant deployed integration | Category and consent requirement depend on the actual purpose | No universal standard names or durations; identify when deployed |
Stripe’s browser cookies depend on whether its browser-side payment components are loaded; a server-to-server webhook does not itself set browser cookies. We do not treat all Stripe cookies as automatically exempt from consent simply because Stripe provides payment services.
Session cookies are designed to expire with a session; persistent cookies have an expiry and may be renewed by later activity. Browser restrictions can shorten their lifespan. Retention of data collected using a cookie can differ from the cookie’s lifetime.
Google Analytics 4
With your analytics consent, we use Google Analytics 4 (GA4) to understand activity on paidmediaschool.com, such as page views, engagement, traffic sources, device and browser characteristics, approximate location, and relevant registration, enrolment, or purchase events where configured.
GA4 can use first-party cookies containing a pseudonymous client identifier to distinguish browsers and sessions. These are not permanent identifiers with an unlimited lifespan. Cookies and associated event data may constitute personal data even where they do not include your name. We do not describe Analytics information as anonymous merely because direct identifiers are absent.
Google states that Analytics does not log or store individual IP addresses from users in the European Union, Switzerland, or the United Kingdom; collected addresses are used for coarse location derivation and discarded before logging. This does not prevent our hosting or security systems from processing IP addresses separately for their disclosed purposes.
Age, gender, and interest reports are not necessarily available for every visitor. Where Google signals or other eligible advertising features are enabled, and the relevant user choices and consent permit it, Google may enrich reports with demographic or interest information. Eligibility, regional controls, and reporting thresholds can limit the information shown. We do not claim these features are enabled merely because GA4 is installed.
If we link GA4 with Google Ads or use Analytics audiences for advertising, those advertising activities are also subject to your advertising consent and the applicable settings. Our website measurement is limited to activity on our domain; platform attribution or advertising processing by Google is described separately below.
More information: Google Privacy Policy and Google’s information about partner sites. Google also provides a Google Analytics opt-out browser add-on; it is an additional control and does not replace our consent settings.
Google Ads And Remarketing
With your advertising consent, Google advertising tools may receive website interaction data, cookie or browser identifiers, ad-click information, and conversion events. We use these to measure campaigns, attribute registrations or purchases to advertising, and create audiences based on previous interactions with our website. Google calls these remarketing audiences “your data segments”.
These audiences may allow our advertising to appear on relevant Google services and participating third-party websites or apps. Google may associate information with other data it holds, subject to the product used, applicable terms, user settings, and consent. We do not receive a record of all websites you visit merely because we use remarketing.
Audience membership, reporting, and cookie duration depend on the configuration and product; they are not the same retention period. You can withdraw advertising consent through “Manage preferences” and use Google’s own advertising controls, including My Ad Center.
Meta / Facebook And Instagram Advertising
With your advertising consent, we may use Meta tools, including the Meta Pixel, to measure website actions associated with our advertising and create audiences based on previous website interactions. Depending on the implementation, Meta may receive page and event information, browser and device information, IP address, and browser or click identifiers such as _fbp and _fbc. Events may include page views, registrations, enrolments, or purchases where configured.
The Meta Pixel is activated only after you give the relevant advertising consent, rather than automatically when you first land on a page. It may then associate website events with advertising interactions and, where Meta can make the connection, a Meta account. These activities may support measurement, website Custom Audiences, and relevant advertising on Facebook, Instagram, and other eligible Meta placements.
Where available and enabled, audience-expansion or lookalike features may help Meta find people with characteristics similar to an existing audience. Availability and operation depend on Meta’s current products, region, settings, and eligibility; use of the Pixel does not mean every audience feature is active or that we receive individual demographic profiles.
You can withdraw advertising consent through “Manage preferences” and manage advertising choices within Meta’s services. More information: Meta Privacy Policy and Meta Cookies Policy.
Reddit Advertising And Remarketing
With your advertising consent, Reddit advertising tools, such as the Reddit Pixel where enabled, may receive website interaction events, technical information, browser or cookie identifiers, event metadata, and referring-page information. These tools help measure actions taken after viewing or clicking our Reddit ads, attribute conversions, and create audiences based on website interactions.
Where enabled and eligible, Reddit website retargeting or audience-expansion tools may support advertising to previous visitors or relevant audiences. Their availability and operation depend on the product, region, configuration, and applicable choices. Installing the Pixel does not itself establish that customer-list uploads, lookalike audiences, or server-side conversion tracking are in use.
We load the Reddit Pixel and send its tracking events only after you give advertising consent. You can withdraw consent through “Manage preferences” and manage relevant settings in your Reddit account. More information: Reddit Privacy Policy.
Advertising Providers And Profiling
Although we measure website interactions within our own domain, advertising platforms may associate information they receive with activity or information held within their own services and advertising networks, subject to applicable law and settings. That does not give us unrestricted access to your browsing history.
Remarketing involves grouping people according to interactions or inferred interests to select or measure advertising and can constitute profiling. Selecting advertisements does not, by itself, produce legal or similarly significant effects on you. You can withdraw consent to advertising tracking at any time.
Depending on the particular activity and applicable agreement, providers may act as processors, independent controllers, or joint controllers. Where a joint-controller arrangement applies, information about the arrangement and allocation of responsibilities will be made available with the relevant service information.
Emails And Service Communications
With your marketing consent, we may send newsletters, blog updates, educational content, course announcements, and offers promoting additional courses. You can unsubscribe through the link in a marketing email or contact us. Unsubscribing does not stop essential account, course, transaction, security, or legal communications.
We may keep the minimum information needed to record an opt-out and avoid sending further marketing, based on our legitimate interest in respecting your preferences and any applicable legal obligations.
Who Receives Personal Data
We disclose information only where relevant to the purposes described in this policy. Recipients may include:
- Hosting, infrastructure, storage, backup, security, and technical support providers.
- Providers supporting course delivery, account administration, email delivery, and customer support.
- Stripe for payment processing and related services, and banks or accounting providers where purchases occur.
- Google, Meta, and Reddit where their tools are enabled and your consent permits the relevant disclosure.
- Authorised personnel and instructors who need access to administer or deliver courses or resolve support requests.
- Professional advisers, courts, regulators, or public authorities where disclosure is legally required or necessary to protect legal rights.
- Parties to a proposed or completed corporate transaction, where necessary and subject to appropriate safeguards and applicable notice requirements.
Providers acting as our processors must process personal data under our instructions and appropriate contractual safeguards. Other recipients, including some payment and advertising providers, may process information as controllers under their own privacy notices. A plugin provider receives personal data only where the relevant integration transmits information to that provider.
International Transfers
Some providers may process personal data outside the European Economic Area, including in the United States. Where a transfer is subject to GDPR transfer requirements, we use an applicable lawful mechanism. This may be a European Commission adequacy decision, including an applicable framework where the recipient’s participation and the transfer are covered, or the European Commission’s Standard Contractual Clauses together with any supplementary measures required following assessment.
You can contact us for information about the safeguards applicable to a particular transfer and to request a copy, with commercially sensitive information or information about others redacted where necessary.
How Long We Retain Personal Data
We retain personal data only for as long as necessary for its purpose, taking account of service commitments, applicable law, and relevant limitation periods:
- Account and learning records: while your account and course access remain active, and afterwards only where necessary to fulfil continuing access commitments, resolve requests, or comply with legal obligations. Account closure or an erasure request triggers a review of the records that can be deleted.
- Orders, invoices, and accounting records: for the applicable statutory accounting and tax retention periods. Deleting an account does not necessarily permit deletion of these records.
- Enquiries and support records: until the issue is resolved and for a proportionate follow-up period based on the nature of the enquiry and any reasonably foreseeable dispute.
- Security logs: for a limited period proportionate to monitoring and investigating security incidents; records relevant to an incident may be kept longer while it is investigated or a claim remains possible.
- Analytics and advertising data: according to the retention settings of the tools in use and the period needed for the stated purpose. Applicable cookie lifetimes are disclosed in our cookie information.
- Consent and preference records: for as long as necessary to implement your choices and demonstrate compliance, including applicable claim periods.
Where information is no longer needed, we delete it or irreversibly anonymise it. Backup copies are removed through the applicable backup rotation schedule and are not used for ordinary operational processing. Records subject to a legal preservation requirement may be retained until that requirement ends.
Your Rights
Subject to the conditions and exceptions in applicable law, you may:
- Request access to your personal data and a copy of it.
- Ask us to correct inaccurate or incomplete data.
- Ask us to erase personal data.
- Request restriction of processing.
- Receive data you provided in a structured, commonly used, machine-readable format, and request transmission to another controller where the right to portability applies.
- Object, on grounds relating to your particular situation, to processing based on legitimate interests, including associated profiling.
- Object at any time to processing for direct marketing, including related profiling. We will stop that processing.
- Withdraw consent at any time where processing relies on consent.
- Exercise rights concerning solely automated decisions producing legal or similarly significant effects, where such processing occurs.
Contact info@paidmediaschool.com to exercise your rights. We may request proportionate information to verify your identity. We normally respond within one month of receiving a request. Where legally permitted, this may be extended by up to two further months because of complexity or the number of requests; we will notify you within the first month and explain why. Requests are generally free, subject to the exceptions allowed by law.
You may complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija): vdai.lrv.lt. You may also complain to the competent supervisory authority in the country of your habitual residence, workplace, or the alleged infringement. You do not have to contact us before lodging a complaint.
Security
We use technical and organisational measures appropriate to the nature of the personal data and the risks of processing. Access is limited to people and providers who need it for authorised purposes. No website or transmission method can be guaranteed completely secure. Keep your account credentials confidential and contact us promptly if you suspect unauthorised account access.
Children
Our website and professional training services are not directed at children. If you believe a child has provided personal data without appropriate authorisation, contact us so we can investigate and take appropriate action under applicable law.
External Websites And Embedded Services
Links may take you to third-party websites governed by their own privacy notices. Embedded content, such as an externally hosted video, may transmit technical information or use cookies when loaded. Where an embedded service requires optional tracking consent, it is subject to the relevant consent controls. Review the relevant provider’s information before interacting with its services.
Changes To This Policy
We may update this policy to reflect changes in our services, processing activities, or legal requirements. The date above identifies the latest update. Where required, we will provide additional notice and obtain fresh consent before beginning new processing that requires it. Continuing to browse our website does not constitute consent to optional tracking or other processing requiring consent.
Contact
MB Advertiai
Vėtrungių g. 99
Vilnius LT-12107, Lithuania
Email: info@paidmediaschool.com