Effective date: [SET: launch date]

This website, richardlhaight.com (the “Site”), is operated by [SET: legal name and form, e.g. “Richard L. Haight, sole proprietor” or the company name], based in [SET: city, state, country] (“we”, “us”). The Site offers meditation and personal-development courses under the Total Embodiment Method. This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have.

What we collect

• Account information — your email address and, optionally, your name. You sign in with one-time email links; we never store a password for you.
• Purchase information — payments are processed by Stripe. Your card number never reaches our servers. We keep records of what you purchased, when, and the status of any subscription.
• Course activity — which lessons you have watched and how far, so you can resume where you left off, see your progress, and unlock sequential lessons.
• Newsletter and free-course sign-ups — your email address and optional first name. We use double opt-in: nothing is sent until you confirm from your inbox, and we record the consent text and time of confirmation.
• Emails we send you — a delivery log (recipient, message type, delivery status) so we can troubleshoot and prove consent.
• Technical data — standard server logs, error reports (scrubbed of email and IP address, keyed only to an internal account number), and aggregate, anonymous usage statistics.

What we don’t do

We do not run advertising trackers, we do not use third-party advertising cookies, and we do not sell or rent personal information to anyone. The only cookies the Site sets are strictly necessary ones (keeping you signed in). Embedded video players run in privacy mode: Vimeo with “Do Not Track” enabled and YouTube via its no-cookie domain.

How we use your information

• To provide the service — creating your account, granting course access, saving progress.
• To process payments — checkout, subscriptions, renewals, and refunds, via Stripe.
• To send service emails — sign-in links, purchase receipts, access and expiry notices, payment-problem alerts. These are necessary to the service and cannot be opted out of while you hold an account.
• To send marketing emails — only if you opted in (or are an existing customer), and every such email contains a one-click unsubscribe link.
• To keep the Site secure and working — debugging errors and preventing abuse.
• To meet legal obligations — tax and accounting records of purchases.

For visitors in the EU/UK: the legal bases for the above are performance of a contract (accounts, purchases, course delivery), consent (marketing emails), legitimate interests (security, error monitoring, aggregate analytics), and legal obligation (financial records).

Services we rely on

Like most modern websites, we use a small number of specialist providers to run the Site. Each receives only the data it needs to do its job:

• Stripe — payment processing and subscription billing.
• Resend — delivery of service emails.
• Mailchimp — delivery of newsletter and marketing emails.
• Vimeo — hosting and streaming of course videos.
• Vercel and Neon — website hosting and database.
• Cloudflare — storage and delivery of images and files.
• Sentry — error monitoring.
• PostHog — aggregate usage analytics.

Where your data is processed

We are based in the United States and the providers above process data primarily on servers in the United States. If you use the Site from the EU, UK, or elsewhere, your information is transferred to the US and protected under our providers’ standard safeguards, such as the EU–US Data Privacy Framework and standard contractual clauses.

Members of the previous website

If you held membership or course access on our previous website, your account (email, name, and course ownership) was carried over to this Site so your access continues uninterrupted. It is used only for the purposes described in this policy.

How long we keep information

Account and course data is kept while your account exists. Purchase records are retained as long as tax and accounting law requires. Email delivery logs are kept for troubleshooting and consent evidence. If you ask us to delete your account, we remove your personal information except the minimal records we are legally required to keep.

Your rights and choices

• Access and portability — ask for a copy of the information we hold about you.
• Correction — ask us to fix inaccurate information.
• Deletion — ask us to delete your account and data.
• Marketing opt-out — use the unsubscribe link in any marketing email, at any time.
• Objection and restriction — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

To exercise any of these, email us at contact@richardlhaight.com. If you are in the EU or UK, you also have the right to lodge a complaint with your local data-protection authority. California residents may exercise equivalent rights under the CCPA; we do not sell or share personal information as those terms are defined there.

Children

The Site is not directed at children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy as the Site evolves. The effective date above always reflects the current version, and material changes will be announced to account holders by email.

Contact

Questions about privacy or this policy: contact@richardlhaight.com. Postal address: [SET: business postal address].