SkillCraft Productions LLC ("we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, protect, and share information when you visit our website (www.skillcraftproductions.com), register for a course, or participate in any SkillCraft Productions program or activity.
SkillCraft Productions serves participants of all ages, including minors ages 13 and older with parental consent. We take our obligations regarding the privacy of minor participants seriously and have adopted specific practices described in Section 7 of this Policy.
This Policy applies to personal information collected through our website, registration and enrollment processes, paper forms (including medical and health information forms), email and phone communications, and any other interaction with SkillCraft Productions.
We collect information you voluntarily provide when you fill out our contact form, register for a course, sign up for our waiting list, or communicate with us via email or phone. This includes:
For participants enrolling in certain hands-on courses, we collect health information on our Participant Consent, Medical Information & Release Agreement form. This is sensitive information and is governed by the specific protections described in Section 6. It includes:
Health information is collected only to protect participant safety during SkillCraft activities. It is never used for marketing, sold, or shared with any third party except as necessary to respond to a medical emergency or as required by law.
When you visit our website, we may receive standard technical information that web servers routinely collect, such as your browser type and general geographic region. We do not use tracking cookies for advertising purposes. Any analytics tools we use are configured to anonymize visitor data.
We use the information we collect only for the following purposes:
We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use participant health information for any purpose other than participant safety.
We process your personal information on the following legal bases:
We take reasonable and appropriate measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:
No method of data transmission or storage is 100% secure. While we take our security obligations seriously, we cannot guarantee the absolute security of your information. If you believe your information may have been compromised, please contact us immediately at privacy@skillcraftproductions.com.
Health and medical information requires stronger protections than general contact data. This section describes exactly how we handle the sensitive health information collected on our Participant Consent, Medical Information & Release Agreement form. Although SkillCraft Productions is not a HIPAA-covered entity, we apply HIPAA-equivalent handling standards to all health information as a matter of best practice and to comply with the North Carolina Identity Theft Protection Act (N.C.G.S. § 75-60 et seq.), which extends to health-related personal information.
Our Participant Consent, Medical Information & Release Agreement collects health history, allergy information, current medications, and emergency contact details. This information is collected exclusively to:
Health information is never used to evaluate whether to admit a participant to a course, except where a disclosed condition would create a direct safety risk that cannot be reasonably accommodated. If we believe a disclosed condition requires special consideration, we will contact the participant or parent/guardian directly to discuss accommodations before the course date.
Access to participant health information is strictly limited on a need-to-know basis:
| Who | Access Scope |
|---|---|
| SkillCraft Owner (Chad Tiller) | Full access. Responsible for form storage, review, and destruction. |
| Lead Instructor for the Enrolled Course | Permitted to review only the medical conditions, allergies, and restrictions relevant to safe instruction delivery for their specific course. Does not retain copies. |
| On-Site SkillCraft Representative | May be informed of any condition requiring immediate attention during the course. Does not retain copies. |
| Emergency Medical Personnel | Disclosed in a medical emergency to the extent necessary to provide appropriate treatment. |
| No other person or organization | Health information is not shared with instructors teaching other courses, marketing personnel, partner organizations, or any third party, except as required by law. |
Paper health forms (Participant Consent, Medical Information & Release Agreement):
If health information is stored electronically:
We retain participant health information for the following periods, after which it is securely destroyed as described in Section 10:
| Participant Type | Retention Period |
|---|---|
| Adult participant (18+) with no incident | 3 years from date of last course attendance, then securely destroyed |
| Minor participant (under 18) | Until the participant turns 21 (i.e., 3 years past the age of majority), then securely destroyed. This accounts for the longer statute of limitations applicable to claims by or on behalf of minors in North Carolina. |
| Any participant involved in a documented incident or injury | 7 years from the date of the incident, or 3 years from the date the minor turns 18, whichever is longer |
| Any participant subject to a legal hold or active claim | Retained until the legal matter is fully resolved and any applicable statute of limitations has expired |
You (or a parent/guardian for a minor participant) have the right to:
To exercise any of these rights, contact us at privacy@skillcraftproductions.com or by mail at the address in Section 16.
Our website is not directed to children under 13 years of age. We do not knowingly collect personal information directly from children under 13 through our website. The Children's Online Privacy Protection Act (COPPA, 15 U.S.C. § 6501 et seq.) requires verifiable parental consent before collecting personal information online from children under 13.
If we discover that we have inadvertently collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. If you believe we may have collected information from a child under 13, please contact us immediately at privacy@skillcraftproductions.com.
Course enrollment for children under 13 must be completed in person or by telephone by a parent or legal guardian. Children under 13 may not self-register online.
Some SkillCraft Productions courses are available to participants ages 13 to 17 with verifiable parental or legal guardian consent. SkillCraft Productions applies the following protective practices to all minor participants (under 18) as a matter of policy:
Parental/Guardian Consent Required:
Data We Collect From or About Minor Participants:
How We Use Information From or About Minor Participants:
A parent or legal guardian of a minor participant has the following rights with respect to their child's personal information held by SkillCraft Productions:
To exercise any parental rights, contact us at privacy@skillcraftproductions.com. We may ask you to verify your identity and your relationship to the minor before processing a request.
SkillCraft Productions instructors and staff will not initiate direct social media contact, direct messaging, or personal communication with minor participants through personal accounts. All communications with minor participants must go through official SkillCraft Productions channels and, where appropriate, include the participant's parent or guardian.
We use the following third-party services that may process personal information on our behalf. We select processors that maintain appropriate data protection standards and, where applicable, have agreed to process data only on our instructions.
| Processor | Purpose | Data & Protections |
|---|---|---|
| Formspree (formspree.io) | Website contact form processing | Receives name, email, and message content submitted through our contact form. A Data Processing Addendum (DPA) is in place with Formspree governing their use of this data. Review Formspree's privacy policy at formspree.io/legal/privacy-policy. Formspree does not receive health or medical information. |
| Stripe (stripe.com) | Payment processing | Receives payment card and billing information for course registrations. SkillCraft Productions does not store payment card data. Stripe is PCI DSS Level 1 certified. Review Stripe's privacy policy at stripe.com/privacy. |
| Zelle / Banking Provider | Instructor payment (outgoing only) | Used to pay independent contractor instructors. Does not process participant personal information. |
| Email / Communication Platform | Course communications | Used to send enrollment confirmations, course logistics, and updates. Name and email address only. We do not send health information by unencrypted email. |
We do not share personal information with third parties for their own marketing purposes. We do not sell personal information. We do not use ad networks or behavioral advertising tools on our website.
North Carolina's Identity Theft Protection Act (N.C.G.S. § 75-65) requires businesses to notify affected individuals of a security breach involving personal information without unreasonable delay, and no later than 30 days after determining a breach has occurred. Health information is considered personal information under this statute.
A security incident includes any unauthorized access to, acquisition of, or disclosure of personal information that compromises the security, confidentiality, or integrity of that information. This includes:
In the event of a confirmed or suspected security incident involving personal information, SkillCraft Productions will:
Our breach notification will include:
If you believe your personal information held by SkillCraft Productions may have been compromised, please contact us immediately at privacy@skillcraftproductions.com or by calling (210) 310-4076. We take all reports seriously and will investigate promptly.
We retain personal information only as long as necessary for the purpose for which it was collected, to fulfill our legal obligations, and to defend against potential legal claims. When information is no longer needed, we destroy it securely to prevent unauthorized access.
| Data Category | Retention Period | Destruction Method |
|---|---|---|
| General enrollment & contact information (adult) | 3 years from last activity | Electronic: secure deletion / overwrite. Paper: cross-cut shredding. |
| Health / medical forms (adult participant, no incident) | 3 years from date of last course | Paper: cross-cut shredding. Electronic: secure deletion. |
| Health / medical forms (minor participant, no incident) | Until participant turns 21 | Paper: cross-cut shredding. Electronic: secure deletion. |
| Health / medical forms (any incident or injury) | 7 years from incident date, or until minor turns 21, whichever is longer | Paper: cross-cut shredding. Electronic: secure deletion. |
| Signed waivers and release forms (adult) | 3 years from date signed | Cross-cut shredding / secure deletion |
| Signed waivers and release forms (minor) | Until participant turns 21 | Cross-cut shredding / secure deletion |
| Photo / video release forms | Duration of active use, then 3 years after last use of the image | Shredding / secure deletion |
| Payment records | 7 years (IRS requirement for business records) | Secure deletion per payment processor policies |
| Instructor contractor records | 7 years from end of engagement | Cross-cut shredding / secure deletion |
| Any record subject to a legal hold | Until legal matter is fully resolved | Held pending resolution; then destroyed per applicable category |
Destruction is documented. When health or medical forms are destroyed, we log the date, the category of records destroyed, and the method used. This log is itself retained for 3 years.
Photography and video recording during courses is only permitted with the express consent of the instructor. Unauthorized recording is prohibited. If you wish to document any portion of a course for personal use, please ask the instructor for permission before the course begins.
To protect the privacy and safety of young participants, SkillCraft Productions will only photograph or video record participants under the age of 18 with explicit parental or guardian permission. Parents and guardians may grant or decline photo permission on the Participant Consent form. Photos of minors taken with permission may be used for SkillCraft Productions marketing materials, website, and social media. Parents and guardians may revoke photo permission at any time by contacting us at privacy@skillcraftproductions.com.
Photo and video release records are retained as described in Section 10. If a parent or guardian revokes consent, we will promptly remove identifiable images of the minor from active marketing use and will not publish new images following revocation. We cannot guarantee removal of images already distributed to third parties prior to revocation.
Regardless of your location, you have the following rights with respect to your personal information held by SkillCraft Productions:
To exercise any of these rights, contact us at privacy@skillcraftproductions.com. We will respond to verifiable requests within 30 days. We may need to verify your identity before processing a request. We will not discriminate against you for exercising your privacy rights.
Some hands-on courses require participants to sign a liability waiver and assumption of risk agreement prior to participation, and a separate Participant Consent, Medical Information & Release Agreement. If a waiver is required for a specific course, this will be clearly stated in the course description. Participants will receive waiver documentation prior to the course date.
Signed waivers and consent forms are personal information. They are stored and destroyed in accordance with the retention schedule in Section 10 of this Policy.
A minimum of 4 registered students is required to hold any class or workshop. If the minimum is not met, registered students will be notified and offered the choice of transfer to the next available session or a full refund.
If balance is not received by the deadline, the student's spot is released and the deposit is forfeited. To request a cancellation or refund, contact us at info@skillcraftproductions.com.
SkillCraft Productions reserves the right to cancel or reschedule courses due to instructor illness, emergency, insufficient enrollment, facility unavailability, or other unforeseen circumstances. For outdoor courses or in the event of severe weather, courses may be cancelled or rescheduled at our discretion to ensure participant safety. If SkillCraft cancels a course and cannot offer a suitable rescheduled date, participants will receive a full refund or may apply their payment toward a future course.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or course offerings. When we make material changes, we will post the updated Policy on our website with a revised "Last Updated" date and, where the changes are significant, we will notify active participants directly by email.
We encourage you to review this Policy periodically. Your continued participation in SkillCraft Productions programs after a Policy update constitutes your acknowledgment of the updated terms.
For any privacy-related questions, requests, or concerns, please contact us:
| Organization | SkillCraft Productions, LLC |
| Privacy Contact | Chad Tiller, Owner |
| privacy@skillcraftproductions.com | |
| Phone | (210) 310-4076 |
| Website | www.skillcraftproductions.com |
| Mailing Address | 310 Dark Forest Dr, Chapel Hill, NC 27516 |
| Response Time | We will respond to all privacy-related inquiries within 30 days of receipt. |