Privacy Notice
Last updated: July 20, 2026
1. Who we are
Embodied: Integrative Wellness ("we", "us") is the data controller for personal data collected through the Awakening Through Relationshiptoolkit (the "Service"). Contact: embodiedabi@gmail.com.
2. What we collect and why
- Account data — your email address and a hashed password. Used to create and secure your account. Legal basis: performance of a contract.
- Journal content — the reflections you write inside the toolkit. Stored so you can return to them. Legal basis: performance of a contract.
- Purchase records — a record that you purchased the toolkit, including a payment-provider transaction ID and environment. Used to grant you access. Legal basis: performance of a contract and legal obligation.
- Technical data — IP address, browser type, and basic request metadata generated automatically when you use the Service. Used for security, debugging, and service reliability. Legal basis: legitimate interests.
- Support correspondence — anything you send us by email. Used to reply. Legal basis: legitimate interests.
We do not collect or store your payment card details. Those are handled directly by our payment provider.
3. Who we share your data with
- Paddle.com — our Merchant of Record. Paddle receives your purchase details, contact information, and payment data in order to process payments, calculate and remit taxes, handle invoicing and refunds, and combat fraud. See Paddle's Privacy Notice.
- Hosting and infrastructure providers — including Lovable, which hosts the Service and its underlying database, storage, and authentication.
- Professional advisers — accountants and lawyers, where necessary.
- Authorities — where we are required to disclose by law.
We do not sell your personal data.
4. International transfers
Some of our providers operate outside your country of residence. Where personal data is transferred outside the UK / EEA, we rely on standard contractual clauses or equivalent safeguards.
5. How long we keep it
Account and journal data are kept for as long as your account exists, plus a short buffer for backup rotation. Purchase records are kept for the period required by tax and accounting law (typically 6–7 years). You may request deletion of your account and journal content at any time.
6. Your rights
Depending on where you live, you have rights to: access the data we hold about you, correct it, delete it, restrict or object to processing, port it, and withdraw consent where processing is based on consent. If you are in the UK or EEA, you also have the right to complain to a supervisory authority. To exercise any of these rights, email embodiedabi@gmail.com. We aim to respond within one month.
7. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, encrypted at-rest storage, and row-level access controls that scope your data to your account.
8. Cookies
The Service uses only essential cookies and local storage required for authentication and to remember your journal drafts on your device. We do not run third-party analytics or marketing cookies.
9. Changes to this notice
We may update this notice from time to time. Material changes will be reflected here with a new "Last updated" date.