Privacy Policy

Updated: November 3, 2026

Introduction

We care about your privacy online, so here is relevant information regarding privacy on our Website, secondstorywindow.net, as owned and operated by Second Story Window, LLC, doing business as Teacher Approved Club (“we”; “us”; or “our”). Our goal is to safeguard the privacy of all our visitors and users; to explain who we are and how and why we collect, store, use, and share personal information; and to explain your rights in relation to your personal information. By using this Website, you agree to the following Privacy Policy. Please read this policy carefully before using this Website. This Policy applies to this Website, and any sites, mobile apps, or products that display or link to this Policy, including our landing pages, our online courses and memberships, and the Reclaim Your Winter Break challenge hub. It does not apply to any website, mobile app, service, or product that does not display or link to this Policy or that contains its own privacy policy.

No Use for Children

Our Website and any offerings or services on it are not intended for anyone under 13 years of age or anyone considered a child under their country’s laws. If you are under 13, you may not use or provide any information on this Website, use any of its features, register for an account, make any purchases, use any of the interactive or public comment/community features, or provide any information about yourself to us.

If we learn that we have received personal information from a child without validated parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at hello@secondstorywindow.net.

Our resources are made for teachers to use with their students. Please do not enter students’ names or other student information into our forms, challenge hub, comments, or community features.

Personal Information We Collect and Use

We collect a variety of information from you when you visit our Website, make purchases, or interact with us on social media or with advertising partners. By accepting this Privacy Policy, you specifically consent to our collection of the data described below, to our use of the data, to the processing of this data, and to our sharing of the data with third-party processors as needed for our legitimate business interests.

The information we collect may include:

Personal Data: Personal Data is information that can be used to identify you specifically, including your name, shipping address, email address, telephone number, or demographic information like your age, gender, or hometown. You consent to giving us this information by providing it to us voluntarily on our Website or any mobile application. You provide some of this information when you register with or make purchases from our Website, sign up for our emails or a free resource, or register for a challenge or event. You may also provide this information by participating in various activities associated with our site, including interacting with any community features or providing user-generated content, contacting us with questions, or participating in any group or community activity. Your decision to disclose this data is entirely voluntary.

Challenge Hub Data: When you register for the Reclaim Your Winter Break challenge, we collect your name and email address. Your private challenge hub also stores the plans, lists, and homework you type into it, so that you can come back to them and so that we can run the challenge giveaway drawings. Your hub is private to you. We only share your homework or wins outside your hub if you give us permission.

Derivative Data: Derivative data is information that our servers automatically collect about you when you access our Website, such as your IP address, browser type, the dates and times that you access our Website, and the specific pages you view. If you are using a mobile application, our servers may collect information about your device name and type, your phone number, your country of origin, and other interactions with our application or service.

Financial Data: Financial data is data that is related to your payment method, such as credit card or bank transfer details. We collect financial data in order to allow you to purchase, order, return, or exchange products or services from our Website and any related mobile apps. We store limited financial data. Most financial data is transferred to our payment processors, Stripe (including Apple Pay and Google Pay when offered at checkout) and PayPal, and you should review these processors’ respective Privacy Policies to determine how they use, disclose, and protect your financial data.

Social Networking Data: We may access personal information from social networking sites and apps, including but not limited to: Facebook, Instagram, LinkedIn, Twitter, Pinterest, TikTok, or other social networking sites or apps not named specifically here, which may include your name, your social network username, location, email address, age, gender, profile picture, and any other public information linked to those accounts. If you do not want us to access this information, please go to the specific social networking site and change your relevant privacy settings.

Mobile Device Data: If you use our Website via a mobile device or app, we may collect information about your mobile device, including device ID, model and manufacturer, and location information.

Comments and Media: When you leave a comment on our Website, we collect the information shown in the comment form, along with your IP address and browser user agent to help with spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. After your comment is approved, your profile picture is visible to the public in the context of your comment. If you upload images to the Website, please avoid uploading images with embedded location data (EXIF GPS) included, because visitors can download and extract that data.

Other Data: On occasion, you may give us additional data by entering a contest or giveaway or to participate in a survey. You will be prompted for this information, and it will be clear that you are voluntarily offering this kind of information. Giveaways connected with the Reclaim Your Winter Break challenge are also governed by the Official Giveaway Rules.

Cookies and Similar Technologies

Like many Websites, this site uses cookies, pixels, and similar technologies to track particular aspects of you and other people who visit us. Cookies are tiny files that are downloaded to your computer to track particular aspects of your activity online to help us learn certain things about our Website. This tracking is done to provide us with information on how people move about the site, what is of interest to them and what is not, how our marketing is performing, and incidental items such as what percentage of users access the site from a personal computer versus a mobile phone. You may block most cookies by adjusting your browser settings as well as by using the cookie banner and the “Manage Consent” tab on this site (see “Your Cookie Choices” below). This site uses the following cookies:

Type	Provided by	What it does
Essential: shopping cart and checkout	WooCommerce, FunnelKit	Remembers what is in your cart and keeps your checkout session working.
Essential: payments and fraud prevention	Stripe, PayPal	Processes your payment securely and helps prevent fraud.
Essential: accounts and courses	WordPress, LearnDash	Keeps you logged in to your account, courses, and memberships. Login cookies last two days, or two weeks if you select “Remember Me.”
Essential: comments	WordPress	If you choose, saves your name, email address, and website for one year so you don’t have to re-enter them when you leave another comment.
Security and spam protection	CleanTalk, Cloudflare	Helps tell real visitors from bots and protects forms and logins from spam and attacks.
Analytics	Google Analytics	Tells us, in aggregate, how visitors find and use our Website.
Advertising and marketing	Meta (Facebook and Instagram) Pixel, Pinterest Tag	Measures how our ads perform and lets us show our ads to people who have visited our Website.
Marketing attribution	FunnelKit	Remembers which link, ad, or campaign brought you to our Website (for example, UTM parameters and the referring page).
Email sign-up	Kit	Recognizes you as a subscriber after you sign up so we can show you relevant content and avoid asking you to sign up twice.

Articles on this Website may include embedded content from other websites (for example, videos or social media posts). Embedded content behaves in the exact same way as if you had visited the other website, and those websites may collect data about you, use cookies, and embed additional third-party tracking.

How We Use Your Information

Your personal information allows us to offer you certain products and services, including the use of our Website; to fulfill our obligations to you; to customize your interaction with our company and our Website; and to allow us to suggest other products and services we think might interest you. We generally store your data and transmit it to a third party for processing. However, to the extent we process your data, we do so to serve our legitimate business interests (such as providing you with the opportunity to purchase our goods or services and interact with our Website).

Specifically, we may use the information and data described above to:

Create and administer your account
Deliver any products or services purchased by you to you
Correspond with you
Process payments or refunds
Contact you about new offerings that we think you will be interested in
Interact with you via social media
Send you a newsletter or other updates about our company or Website
Deliver targeted advertising
Request feedback from you
Notify you of updates to our product and service offerings
Resolve disputes and troubleshoot any problems
Administer contests or giveaways
Generate a profile that is personalized to you, so that future interactions with our Website will be more personal
Compile anonymous statistical data for our own use or for a third party’s use
Assist law enforcement as necessary
Prevent fraudulent activity on our Website or mobile app
Analyze trends to improve our Website and offerings

Why We Disclose Your Information

We may share your information with third parties in certain situations. In particular, we may share your data with third-party processors as needed to serve our legitimate business interests, which include administration of our Website, administration of your account, entering into contracts with you, communicating with you, taking orders for goods or services, delivering our goods and services, identifying trends, protecting the security of our company and Website, and marketing additional goods and services to you. The legal basis for our disclosure of your data is both your consent to this Privacy Policy and our own right to protect and promote our legitimate business interests.

The following are specific reasons why we may share your information.

Third-Party Processing: We may disclose your information to third parties who assist us with various tasks, including payment processing, hosting services, email delivery, and customer service. The service providers we currently use include:

Kit (formerly ConvertKit), for our email list, newsletters, and email sign-up forms
WooCommerce and FunnelKit, for our online store, checkout pages, and order records
Stripe and PayPal, for payment processing
LearnDash and WooCommerce Memberships and Subscriptions, for course and membership access
Leadpages, for some of our landing pages and sign-up pages
Netlify and Airtable, for hosting and storing the Reclaim Your Winter Break challenge hub, including your name, email address, and the plans you type in
BigScoots and Cloudflare, for website hosting, performance, and security
CleanTalk, for spam protection on comments and forms
Google Analytics, for website analytics
Meta and Pinterest, for advertising and ad measurement

By Law: We may share your data as required by law or to respond to legal process, including a subpoena, or as necessary to protect the rights, property, and safety of others. This includes sharing information with other parties to prevent or address fraud and to avoid credit risks.

To Protect our Company: We may use your information to protect our company, including to investigate and remedy any violations of our rights or policies. We may also disclose your information as reasonably necessary to acquire and maintain insurance coverage, manage risks, obtain financial or legal advice, or to exercise or defend against legal claims.

Advertisers: We may use third-party advertising companies to run and manage our ads and to produce ads that appear when you visit our Website or mobile app. These companies may use information about your visit to our Website and other Websites that are contained in web cookies to offer you personalized advertisements about goods and services that might interest you. We cannot control the activities of other advertisers or websites and you should consult the respective Privacy Policies of these third-party advertisers for more detailed information on their practices as well as for instructions about how to opt-out of certain practices.

Other Third Parties: We may share information with advertisers, our investors, or other third parties for the purpose of conducting general business analysis. If we do so, we will make reasonable efforts to inform you if required by law.

Sale or Bankruptcy: If our whole company or some of its assets are sold, merged, restructured or the company goes out of business or enters bankruptcy, your information may be an asset that is transferred to a third-party successor. Such a successor is not bound by this Privacy Policy and may have its own privacy terms.

Interaction with Others: If you interact with others on our Website or mobile app, such as participating in a group chat, group video, program, or online course, other users may have access to some of your data, including your name, image, likeness, profile picture, and your history of interaction with our Website, such as prior comments or posts. Your participation in any such interaction or recording is your consent to that recording and a release of all moral rights to the recording or interaction.

User-Generated Content: If you submit user-generated content including any comments, reviews, or posts online, that content may be viewed by others, and we may distribute that content outside the Website for any purpose.

External Links: Our Website may include links to other Websites not controlled by us. We do not regularly monitor the websites of third parties and are not responsible for any content on the sites or any damages you suffer by using these links. We are not bound by the privacy policies of any third-party website that you access by a link, and they are not bound by ours. We encourage you to read the policies of those third-party websites before interacting with them or making purchases as they may collect different information via different methods than us.

Other Purposes: We may disclose your personal data as necessary to comply with any legal obligation or to protect your interests, or the vital interests of others or our company.

EEA/GDPR Users

This website is operated in the United States and the third parties with whom we might share your personal information as explained above are also located in the United States or other countries located outside the EU. If you are located in the EEA or elsewhere outside of the United States, please be aware that any information you provide will be transferred to the United States. By using this website, participating in any of its services and/or providing your information, you consent to this transfer.

These countries do not have the same data protection laws as the United Kingdom and EEA. While the European Commission has not given a formal decision that such countries provide an adequate level of data protection similar to those which apply in the United Kingdom and EEA, any transfer of your personal information will be subject to the derogation in Article 49 permitting non-repetitive transfers that concern only a limited number of data subjects, as permitted by Article 49 of the General Data Protection Regulation that is designed to help safeguard your privacy rights and give you remedies in the unlikely event of a misuse of your personal information.

If you would like further information, see “How to Contact Us” below or email us at hello@secondstorywindow.net. We will not otherwise transfer your personal data outside of the EEA or to any organization (or subordinate bodies) governed by public international law or which is set up under any agreement between two or more countries.

If you are covered by the General Data Protection Regulation, you have a number of rights, including the rights to:

Fair processing of information and transparency over how we use your personal information.
Access to your personal information and to certain other supplementary information that this Privacy Policy is already designed to address.
Correcting any mistakes in your information which we hold.
Erasure of personal information concerning you in certain situations.
Receiving the personal information concerning you which you have provided to us, in a structured, commonly used and machine-readable format and the right to transmit that data to a third party in certain situations.
Objecting at any time to processing of personal information concerning you for direct marketing.
Objecting to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you.
Objecting in certain other situations to our continued processing of your personal information and restricting our processing of your personal information in certain circumstances.

You may also have the right to claim compensation for damages caused by our breach of any data protection laws.

For further information on each of those rights, including the circumstances in which they apply, see the Guidance from the UK Information Commissioner’s Office (ICO) on individuals’ rights under the General Data Protection Regulation, available at: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.

If you would like to exercise any of those rights, please:

Email, call, or write to us.
Provide us enough information to identify you (e.g., name, e-mail address, mailing address, username, billing details).
Provide us proof of your identity and address (a copy of your driver’s license or passport and a recent utility or credit card bill).
Provide us with the information to which your request relates, including any account, order or reference numbers, if you have them.

Your Cookie Choices and “Do Not Sell or Share”

When you first visit our Website, a cookie banner explains that we use cookies to see how our site is used and to show you relevant ads. Analytics and advertising cookies (including Google Analytics, the Meta Pixel, and the Pinterest Tag) load unless you opt out. You can opt out at any time using the Do Not Sell or Share My Personal Information link in the banner and in our site footer, and you can change your choices later using the “Manage Consent” tab on our Website. We treat a Global Privacy Control or Do Not Track signal from your browser as a request to opt out of these cookies and of the sale and sharing of your personal information.

Rights Under the CPRA: Sale and Sharing of Personal Information

We do not “sell” your personal information as defined under the California Privacy Rights Act (CPRA). However, we may “share” your personal information for purposes of cross-context behavioral advertising. If you wish to opt out of such sharing, use the Do Not Sell or Share My Personal Information link in our site footer or cookie banner, turn on Global Privacy Control in your browser, or contact us at hello@secondstorywindow.net with the subject line “Do Not Sell or Share My Personal Information.”

Opt-Out Rights Under CPA, CTDPA, VCDPA, UCPA

Residents of Colorado, Connecticut, Virginia, and Utah have the right to opt out of the processing of their personal data for purposes of targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. To opt out of targeted advertising, use the Do Not Sell or Share My Personal Information link in our site footer or cookie banner. To exercise this or any other right, you can also contact us at hello@secondstorywindow.net.

Sensitive Personal Data

We do not intentionally collect or process sensitive personal data (such as racial or ethnic origin, religious beliefs, health data, or precise geolocation). If we do, we will obtain your express consent before collecting or using such data, in accordance with applicable privacy laws.

Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy, including legal, accounting, or reporting obligations. We may retain anonymized data for internal research and analytics purposes. For example:

Order records are kept for as long as we need them for tax, accounting, and legal purposes.
Account information is kept until you ask us to delete your account. You can see and edit your account information at any time, except your username.
Your email subscription information is kept until you unsubscribe or ask us to delete it.
Your challenge hub entries are kept while your challenge access, or any lifetime access you purchase, is active. You can ask us to delete them at any time.
Comments and their metadata are kept indefinitely so we can recognize and approve follow-up comments automatically.
Security logs, which may include IP addresses, logged-in user IDs, and usernames used in login attempts, are kept for 60 days.

Right to Appeal Denied Requests

If your request to access, delete, or correct your personal information is denied, you have the right to appeal that decision. Please email hello@secondstorywindow.net with the subject line “Appeal Request” and include relevant details. We will respond within the timeframe required by applicable law.

Rights Under the CCPA

The California Consumer Privacy Act of 2018 (“CCPA”) took effect January 1, 2020 and provides California consumers with certain rights regarding their personal information.

The section “Personal Information We Collect and Use” explains the specific details of personal information that we collect. The CCPA also requires listing categories of personal information collected. As defined by the CCPA, we collect, or have collected in the past 12 months, the following categories of personal information:

Identifiers (such as name, email address, postal address, phone number, IP address)
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)) such as name, contact information, employment
Commercial information (such as transaction information, purchase history, payment information)
Internet or other electronic network activity information (such as browsing history, search history, online behavior)
Professional or employment-related information (such as the grade level or subject you teach)
Inference data about you (such as additional features we think would be of interest to you)

Personal information, as defined by the CCPA, does not include publicly available information from government records and de-identified or aggregated consumer information.

We use and disclose the categories of personal information we collect from and about you consistent with the business purposes discussed in the section “How We Use Your Information.”

The CCPA also sets forth obligations for businesses that “sell” personal information to third parties. We do not “sell” personal information and have not sold any personal information in the past 12 months. However, we recognize that exchanging your information to other providers for something of value may be considered “selling” under the CCPA’s definition and want to err on the side of transparency.

If you are a California resident, you may have the following consumer rights:

Right to know about personal information collected, used, disclosed, or sold. You have the right to request that we disclose to you the categories of personal information we collect or disclose (or have collected or disclosed in the past 12 months) about you, the categories of sources of such information, the business or commercial purpose for collecting your personal information, and the categories of third parties with whom we share/disclose personal information. This information is also explained throughout this Privacy Policy.
Right to request deletion of personal information. You have the right to request the deletion of your personal information we have collected from you, subject to certain conditions and limitations under the law.
Right to Opt Out of the sale of personal information. The CCPA provides consumers with the right to opt out of the sale of their personal information. We do not share, sell, rent, or trade User Personal Information with third parties for their commercial purposes as defined under the CCPA.
Right to non-discrimination for exercising a consumer privacy right. We will not discriminate against you for exercising any of your rights under the CCPA.

To exercise any of your rights as set out above, please contact us by email at hello@secondstorywindow.net or by mail at Second Story Window, LLC, PO Box 398, Farmington, UT 84025. You will be required to verify your identity before we are able to fulfill your request. You can designate an authorized agent to make a request on your behalf. To do so, you will need to provide a written authorization or power of attorney signed by you for the agent to act on your behalf. You will still need to verify your identity with us. Note that consumers may only make a personal information request twice in a 12-month period under the CCPA. We will work to respond to your verifiable request within 45 days of receipt. Certain information may be exempt from requests under applicable law.

Nevada Users’ Rights

Residents of the State of Nevada have the right to opt out of the sale of certain pieces of their personal information to third parties who will sell or license their information to others. If you are a Nevada resident and would like to make such a request, please contact hello@secondstorywindow.net with your request.

Do Not Track Signals

Pursuant to California law, we disclose that our Website honors Do Not Track and Global Privacy Control signals. When your browser sends one of these signals, our cookie tool treats it as a request to opt out, and analytics and advertising cookies are not loaded.

Privacy Concerns, Contacting Us, Complaints

You can contact hello@secondstorywindow.net with any questions or requests about these policies or your personal data. If you have an account on this Website or have left comments, you can also ask us for an exported file of the personal data we hold about you, or ask us to erase it. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Legal Disclosures of Personal Information

We may process, store, and disclose personal information if required to do so by law or in the good-faith belief that such action is necessary to 1) conform to the edicts of the law or comply with legal process served on us; 2) protect and defend our rights or property; or 3) act under exigent circumstances to protect the safety of the public or users of the site.

We comply with the Digital Millennium Copyright Act of 1998 and, as part of the compliance process, we may be required to disclose whatever information we have for you to a copyright holder who has submitted a complaint to us.

Severability

If any part of this Privacy Policy is deemed unlawful and/or unenforceable, all other provisions contained herein will remain in full force and effect.

Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with United States law. Any dispute arising out of or related to the information contained herein is subject to adjudication in the state of Utah.

Privacy Policy Modifications and Updates

We may update and modify this Privacy Policy at any time. We will email you if we update this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. Your use of the Website and/or its services serves as your acceptance of these updated terms.

How to Contact Us

If you have any questions about this Privacy Policy, please contact us at hello@secondstorywindow.net.

Second Story Window, LLC, dba Teacher Approved Club
PO Box 398
Farmington, UT 84025

Site maintained by ShelleyWeb.com