Privacy Policy

Effective date: [EFFECTIVE DATE]

Last updated: [EFFECTIVE DATE]

This Privacy Policy explains how [LEGAL ENTITY NAME] ("we," "us," or "our") collects, uses, shares, and protects your personal information when you visit [WEBSITE URL] (the "Site"), join our email list, or purchase our products and services (together, the "Services").

If you have questions, contact us at [CONTACT EMAIL] or [BUSINESS MAILING ADDRESS].

1. Who we are

[LEGAL ENTITY NAME] is the controller responsible for your personal information. For privacy questions, our contact details are in Section 13.

2. Information we collect

Information you give us:

• Contact details — name and email address when you join our waitlist or email list; phone number if you provide it at checkout.
• Purchase information — billing name, billing address, and the products you buy. Payment card details are entered directly with our payment processor and are not stored on our servers (see Section 4).
• Communications — messages you send us and your email engagement (opens, clicks, replies).

Information collected automatically:

• Usage and device data — IP address, browser type, device information, pages viewed, and referring URLs.
• Cookies and similar technologies — including analytics and advertising pixels (see Section 6).

We do not intentionally collect sensitive categories of personal data (such as health, financial account credentials beyond what's needed to process a payment, or government IDs).

3. How we use your information

We use your information to:

• deliver the waitlist, course, and any premium products you request;
• send you marketing emails about the course, related offers, and updates;
• process payments and provide customer support;
• operate, secure, and improve the Site and Services;
• measure marketing performance and, where permitted, show relevant ads;
• comply with legal obligations.

Legal bases (for individuals in the EEA/UK): we rely on your consent (email marketing, non-essential cookies), performance of a contract (delivering products you purchase), our legitimate interests (securing and improving the Services, basic analytics), and legal obligations where applicable. You can withdraw consent at any time.

4. How we share your information

We share personal information with service providers who process it on our behalf under contract, including:

• CRM / marketing platform — GoHighLevel (contact management, email, funnels);
• Payment processing — [PAYMENT PROCESSOR, e.g. Stripe/PayPal];
• Email delivery — [PROVIDER, if separate];
• Analytics — [e.g. Google Analytics];
• Advertising — [e.g. Meta Pixel, Google Ads], where enabled.

We may also disclose information to comply with law, enforce our terms, protect our rights or safety, or in connection with a business transfer (merger, acquisition, sale of assets).

We do not sell your personal information for money. Some sharing with advertising partners may qualify as a "sale" or "sharing" for targeted advertising under certain US state laws — see Section 9 for how to opt out.

5. International data transfers

We may process and store your information in [PRIMARY COUNTRY, e.g. the United States] and other countries where our service providers operate. Where we transfer personal data out of the EEA or UK, we use appropriate safeguards (such as Standard Contractual Clauses) as required by law.

6. Cookies and tracking

We use cookies and similar technologies to run the Site, remember preferences, measure performance, and support advertising. You can control cookies through your browser settings and, where we provide one, our cookie banner. Blocking some cookies may affect how the Site works. [If using a consent banner, describe it here.]

7. Data retention

We keep personal information for as long as needed to provide the Services and for legitimate business or legal purposes — for example, we retain purchase records as required by tax and accounting rules, and email-list data until you unsubscribe or ask us to delete it.

8. Your privacy rights (EEA / UK — GDPR)

Subject to applicable law, you have the right to: access your data; correct inaccurate data; delete your data; restrict or object to processing; data portability; and withdraw consent. You may also lodge a complaint with your local data protection authority. To exercise these rights, contact us at [CONTACT EMAIL].

9. Your privacy rights (US state laws — California and others)

If you are a resident of California or another US state with a comprehensive privacy law, you may have the right to: know/access the personal information we collect; delete it; correct it; and opt out of the "sale" or "sharing" of personal information for targeted advertising. We will not discriminate against you for exercising these rights.

To opt out of targeted-advertising "sharing," you can [adjust cookie settings / use our "Do Not Sell or Share My Personal Information" link / email us at [CONTACT EMAIL]]. To exercise other rights, contact [CONTACT EMAIL]. We will verify your request before acting on it.

10. Marketing communications and opt-out

• Email: every marketing email includes an unsubscribe link and our physical mailing address, as required by the CAN-SPAM Act. Unsubscribing stops marketing emails; we may still send transactional messages (e.g. purchase receipts, course access).

11. Children's privacy

The Services are not directed to children under [16 / 13 — set per your primary jurisdiction], and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

12. Security

We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Changes and contact

We may update this Policy from time to time; the "Last updated" date will change and, where required, we'll notify you. Questions or requests:

[LEGAL ENTITY NAME]
[BUSINESS MAILING ADDRESS]
[CONTACT EMAIL]

This template is provided for convenience and is not legal advice. Have it reviewed by qualified counsel for your jurisdiction and audience before publishing, particularly for GDPR/UK GDPR and US state-law obligations.