The KURE Method® emblemThe KURE Method®

Legal

Privacy policy

Written plainly, activity by activity: what is collected, why, on what legal basis, who receives it and how long it is kept.

Last updated: 14 September 2026

Who is responsible for your data

The controller is The Kure Method LLC, the company that operates The KURE Method® and sells the certification.

The Kure Method LLC2151 Hillsboro Boulevard Medical OfficeDeerfield Beach, Florida 33442United States

Email support@thekuremethod.com, telephone +49 163 6272951. This is the business and contact address, not a stated registered office.

What I do with your data

Reviewing your application for a place

What:
Name, email address, telephone number if you give it, current occupation, experience level, what you wrote about your goals, and your tuition preference.
Legal basis:
Steps taken at your request before entering a contract (GDPR Art. 6(1)(b)).
Who receives it:
Me. Stored in the site's database and hosting infrastructure.
How long:
Twelve months if the application does not lead to enrolment; then deleted.

Running your student account and the programme

What:
Email address, account credentials held by the authentication provider, cohort, enrolment status, course access, reading progress, quiz activity, your messages to me.
Legal basis:
Performance of our contract (Art. 6(1)(b)).
Who receives it:
Me, and the database, authentication and hosting providers that run this site.
How long:
While your account is open, and afterwards as described for assessment records.

Taking payment and keeping financial records

What:
Billing name and email, amount, currency, plan, transaction and payment status. Card numbers are entered directly with the payment processor and are never held by me.
Legal basis:
Performance of our contract, and legal obligation for tax and accounting records (Art. 6(1)(b) and (c)).
Who receives it:
Stripe as payment processor; my accountant and tax authorities where legally required.
How long:
As long as tax and accounting law requires, generally several years.

Assessment and certification records

What:
Quiz results, assessment outcome, certificate details and date.
Legal basis:
Performance of our contract, and my legitimate interest in being able to verify a certificate I issued (Art. 6(1)(b) and (f)).
Who receives it:
Me, and Hermes University Rome where a certificate is issued jointly.
How long:
Kept while your certificate stands, so it can be verified.

Answering enquiries sent through the contact form or by email

What:
Name, email address, subject and message.
Legal basis:
Steps at your request and my legitimate interest in replying to you (Art. 6(1)(b) and (f)).
Who receives it:
Me and the email/database providers used to receive the message.
How long:
Twenty-four months, unless it becomes part of a student or accounting record.

Sending the newsletter, if you sign up

What:
Email address and the fact that you subscribed.
Legal basis:
Your consent (Art. 6(1)(a)). You can withdraw it at any time using the unsubscribe link or by emailing me.
Who receives it:
Me and the email delivery provider.
How long:
Until you unsubscribe.

Keeping the site secure and available

What:
Server and error logs, which may include IP address, browser and device information, and the page requested.
Legal basis:
My legitimate interest in security, fraud prevention and diagnosing faults (Art. 6(1)(f)).
Who receives it:
Hosting and database providers.
How long:
Short retention in provider logs, typically weeks rather than years.

Analytics and advertising

What:
None. No analytics, advertising or retargeting technology is in use on this site at the time of writing.
Legal basis:
Not applicable. If any is added later it will run only with your consent (Art. 6(1)(a)).
Who receives it:
None.
How long:
Not applicable.

Processors and international transfers

I use service providers to run the site: hosting and database infrastructure, authentication, transactional email and Stripe for payments. They process data on my instruction only and are not permitted to use it for their own purposes. Nothing is sold or rented, and nothing is shared for advertising.

Because The Kure Method LLC is based in the United States, data of visitors in the EU/EEA and the United Kingdom is transferred outside those regions. Such transfers rely on the standard contractual clauses or equivalent safeguards offered by each provider. The precise transfer mechanism for each provider should be confirmed with a privacy professional and is flagged for review.

Security

The site is served over HTTPS. Student data is protected by per-user access rules in the database, so one student cannot read another's records, and administrative data is restricted to my own account. Card details never reach this site.

Your rights

  • Ask for a copy of the personal data I hold about you.
  • Ask me to correct anything inaccurate.
  • Ask me to delete data I no longer need to keep.
  • Ask me to restrict or object to a particular use.
  • Ask for the data you gave me in a portable form.
  • Withdraw consent, where consent is the basis, at any time.

Email support@thekuremethod.com and I will respond within thirty days. Some records, such as accounting and certificate records, must be kept even after a deletion request; I will tell you if that applies.

If you are in the EU/EEA or the United Kingdom you may also complain to your national data protection supervisory authority.

Cookies, marketing and updates

Only strictly necessary storage is set without asking you: sign-in, security and secure checkout. No analytics or advertising technology is in use today, and any added later will wait for your consent. Full detail is in the cookie policy.

If this policy changes, the date at the top changes with it. Material changes will be announced to enrolled students by email.

This page is written in plain language for transparency. It is not legal advice and should be reviewed by a qualified lawyer for your jurisdictions before it is relied upon.