Privacy Policy

1Who is responsible for your information

Well-Risen is a baking school operated by Camille Galanis, a sole proprietor based in Queens, New York.

Camille Galanis is the person responsible for this information. There is no company behind it and no data team. There is one person and the services she pays for.

2What this policy covers

well-risenbaking.com, the free sessions, the paid courses, the materials emailed to you, the Well-Risen email list, and the Well-Risen Instagram and Pinterest accounts.

It does not cover Well-Being Behavior, which is a separate brand run by the same person, except for section 8 below, which explains the one thing the two share.

3What we collect, and where it comes from

3.1Things you give us directly

We never see or hold your full card number. Stripe takes the payment and Well-Risen sees only the last four digits, the card brand, and whether it worked.

3.2Things collected automatically

• Website logs and basic traffic counts, held by our hosting provider. Pages visited, approximate location by region, browser type, referring site.
• Whether you opened an email and whether you clicked a link in it, held by our email provider. This is used to see whether an email was any good, not to profile you. You can ask us to stop this for you.
• A honeypot field on our forms, which is an invisible box that only automated spam fills in. It catches bots and nothing else.

3.3Things we get from other people

• Stripe, when you pay: your name, email, the amount, the last four digits, and the country and postal code your card is registered in.
• Instagram, when you comment a keyword on a post and an automated reply sends you a message: your Instagram username and that conversation.
• Zoom, when you attend a session: your display name, join and leave times, and the recording of the session.

3.4What we do not collect

We do not collect your social security number, your driver's license, your date of birth, your precise location, your biometrics, your health records, your race, religion, politics or sexual orientation, or anything about your household beyond what you volunteer.

We do not track you across other websites, run advertising pixels on our site, or buy information about you from data brokers.

4Why we use it

We do not use your information to make automated decisions about you, and there is no profiling, scoring or ranking of students anywhere in this business.

5Allergy and dietary information, handled separately

This is the most sensitive thing we hold, and it is treated that way.

• It is used for one purpose: planning and describing recipes, so you can decide what is safe for you.
• It is not a medical record, we are not a health care provider, and holding it does not make us one.
• It is not shared with anyone outside Well-Risen, is not used for marketing, and is not used to segment an email list.
• It is deleted 12 months after your last session, unless you ask us to keep it for a future course.
• For a school or host organization session, Well-Risen does not hold this information at all. The host holds it and gives Camille only what is needed to plan the recipe. See section 10.

6Recordings, and your image

Camille records the live sessions. Nobody else ever sees them.

They are not part of what you buy, and they are not shared with your class. They exist so Camille can watch her own teaching back and do it better. That is the only purpose and there is no second one.

• Your camera is optional and off is a normal choice. If it is off, you are not in the picture. Your name, and your voice if you speak, are.
• No recording is published, sold, used in marketing, or shown to another student, including the other people in your own cohort.
• We do not ask your permission for any other use, because there is no other use.
• They are deleted within 12 months of the cohort's last session, and usually sooner. That is a maximum, not a plan to keep them.
• Recordings sit on our Zoom account, and Zoom's own retention settings apply to them as well as ours.

Ask for yours to be deleted at any time and it will be. No reason needed, and it changes nothing about your place in the class. Because nobody else is watching, there is no other student's copy to worry about and nothing to negotiate.

7Who we share it with

We do not sell your information. We have never sold it and the business has no plan to.

We share it with the services that make the business run, and with nobody else except as described below. Each of these is a company under contract that handles your information on our instructions.

We also share information where we have to: with a lawyer or an accountant advising the business, with a tax authority, and where the law or a court requires it. If the business is ever sold, your information goes with it, and you will be told before that happens.

Nobody buys advertising access to this list, and we do not run advertising that uses your information.

8Well-Being Behavior

Well-Risen and Well-Being Behavior are two brands run by the same person, and they are separate. Separate websites, separate payment accounts, separate mailing lists.

Until 25 August 2026 they shared a sign-in system, because Well-Risen used to have a student area. It does not any more, so there is nothing shared: Well-Risen holds no account and no password for you at all.

Taking a baking class puts you on the Well-Risen mailing list and nothing else. It does not put you on the Well-Being Behavior list and does not give you anything there.

9How long we keep things

Your materials are in your inbox, not on our website. If you lose one, ask and it is sent again.

10Children

Well-Risen's own classes are sold to and taught to adults, 18 and over. We do not knowingly collect information from anyone under 18 through the website, the forms, the email list.

If you believe a child has given us information, email wellrisenbaking@gmail.com and it will be deleted promptly.

School and host organization sessions work differently, and deliberately so. Where Camille teaches at a school or other host:

• The host organization holds all information about the children, including permission slips, allergy lists, emergency contacts and any media consent.
• Well-Risen does not collect information from a child, does not create an account for a child, does not contact a child, and does not hold a child's records.
• What Camille receives is the information the host provides in order to plan the recipe safely, and it is used for that session and then deleted.
• Photographs and video are taken only where the host confirms in writing that its own media release covers it, and only within what that release permits.

The Family Series, when it opens, will involve a named minor learning alongside a parent or guardian at home. The parent or guardian is the customer, gives the information, and consents on the child's behalf. This policy will be updated before that course goes on sale.

11How your information is protected

We are honest about the size of this. One person, on services chosen partly because they handle security better than a sole proprietor could.

What is actually in place:

• There is nothing to log in to, so there is nothing to break into. Well-Risen holds no student accounts, no passwords and no file store. This is the strongest thing on this list and it is the result of a deliberate decision on 25 August 2026 to email materials rather than build a portal.
• Files sit in a private storage bucket, never on a public web address, and are handed to a signed-in student through a short-lived link rather than a permanent one.
• Well-Risen has no password of yours, on any system. A Well-Being Behavior account is a separate thing on a separate system, and section 8 explains the difference.
• Nothing writes to the database from the browser. Every write goes through a server function.
• The email sending key is restricted to the Well-Risen domain only, so a leak on the website cannot reach the Well-Being Behavior list.
• We do not store card numbers. Stripe does.

New York's SHIELD Act applies to this business, and Well-Risen maintains reasonable administrative, technical and physical safeguards scaled to its size, as that law allows for a small business. If information is ever exposed, affected people and the required New York authorities are notified, as the law requires, and you will be told what happened and what to do.

No system is perfect, and anyone who claims otherwise is selling something. If something goes wrong, you will hear it from us rather than from somebody else.

12Your choices and your rights

These are offered to everyone, whatever state or country you live in, whether or not a law requires it.

How it works. Email wellrisenbaking@gmail.com. You get a reply confirming the request within 10 days, and it is completed within 45 days. If it is going to take longer, you will be told why before that deadline.

Verifying you. We confirm the request from the email address we hold. If we cannot verify who you are, we may not be able to act, because handing your information to the wrong person is the worse outcome.

If we say no, or only partly yes. You get a reason in writing, and you can appeal by replying to that email with the word "appeal" in it. The appeal is read again from the start and answered within 45 days with a written explanation. If you are still not satisfied, section 19 says who else you can go to.

Nobody is penalized for making a request. No price changes, no service withdrawn, no different treatment.

13If you live in California

Well-Risen is a very small business and is below every threshold that makes the California Consumer Privacy Act apply. It has under $25 million in revenue, handles the information of nowhere near 100,000 consumers, and derives no revenue from selling personal information.

The rights in section 12 are offered anyway, and this section says what would be disclosed if the law did apply, so you can judge for yourself.

14Email and messages

• Every marketing email has an unsubscribe link, and unsubscribing takes effect within 10 business days, which is what federal law allows at the outside. In practice it is immediate.
• Course emails are different. While you have a live enrollment, you get the emails carrying your dates, links and materials, because that is the service you paid for. Unsubscribing from marketing does not stop them.
• We do not send text messages and do not collect phone numbers.
• Our postal address is available on request and appears in the footer of marketing emails as required.

15Cookies and similar technologies

The Well-Risen website does not use advertising cookies, tracking pixels or third-party analytics.

What it does use:

• Nothing that identifies you. There is no sign-in, so there is no session cookie.
• Basic server-side traffic counts from our host, which do not follow you anywhere.
• Link and open tracking inside our emails, which you can ask us to turn off for you.

Pages hosted by other companies, such as the Stripe checkout and Zoom, use their own cookies under their own policies.

16Where your information is held

In the United States, on services operated by US companies. If you are outside the US and use Well-Risen, you are sending your information to the US, where privacy law is different from where you live. Section 12 gives you the same choices either way.

17Links to other sites

Our site and emails link to Stripe, Zoom, Instagram and Pinterest, among others. Once you are on their site, their policy governs, not ours.

18Changes to this policy

The version in force is the one published at well-risenbaking.com/privacy, with its effective date at the top. Material changes are emailed to anyone with a live enrollment or on the mailing list at least 14 days before they take effect, and the change is described rather than merely announced.

Past versions are kept and available on request.

19How to reach a person

Email wellrisenbaking@gmail.com. It is read by Camille, and the reply comes from her.

If you are unhappy with how a request was handled, say so in that same thread first. If it is still not right, you can complain to the New York State Attorney General's Bureau of Internet and Technology, or to the attorney general of your own state.