Privacy Policy

1. Information We Collect

We collect personal identification data (e.g., name, email, phone), usage metrics (e.g., page interactions, time spent), and payment details (processed via PCI-compliant gateways). Our tracking employs first-party cookies, pixel tags, and server logs in compliance with ePrivacy Directive and GDPR Art. 6(1)(f).

2. Use of Information

Data is utilized to: (a) deliver personalized coaching recommendations, (b) improve our time mastery curricula, (c) send transactional communications with opt-out, and (d) analyze behavioral patterns via anonymized aggregation. We do not sell data under CCPA Section 1798.120.

3. Data Storage & Security

Information is stored on SOC 2 Type II certified servers with AES-256 encryption at rest and TLS 1.3 in transit. Access is role-based with multi-factor authentication. Retention periods align with statutory obligations (max 36 months post-engagement).

4. Third-Party Sharing

We engage sub-processors for email delivery (SendGrid, DPA in place), analytics (Plausible, privacy-friendly), and payment processing (Stripe, PCI DSS Level 1). These parties are contractually bound to our data protection standards.

5. Your Rights

Under GDPR, you hold rights to access, rectification, erasure, portability, and objection. For CCPA, you may opt-out of data selling (none occurs) and request deletion. Exercise rights via [email protected] with verified identity.

6. Cookies & Tracking

We use functional cookies (session, necessary) and analytical cookies (aggregated, anonymized). Consent is obtained via cookie banner per Art. 4(11) GDPR. Manage preferences via our Cookie Settings panel.

7. International Transfers

Data may be processed in the US or EU. Transfers rely on Standard Contractual Clauses (SCCs) or Adequacy Decisions (EU-US Data Privacy Framework).

8. Policy Updates

Material changes will be emailed 30 days prior. The latest revision date: October 2023. This policy is governed by substantive law of New York.