Privacy Policy

We collect only the information needed to operate the storefront, process your enrollment, and improve the experience:

• Information you provide. Your email address (and, at Stripe's prompt, your billing name, address, and payment details) when you enroll in a course.
• Newsletter signup requests. If you opt in, we forward your email address, consent, and submission time through Gmail to our team for manual addition to our Substack newsletter. Submitting this form does not automatically subscribe you. You can unsubscribe using the link in newsletter emails.
• Payment information. Card numbers and billing details are collected and processed by Stripe directly on Stripe-hosted pages. We never see or store your full payment card information on our servers.
• Usage analytics. An anonymous visitor ID stored in your browser'slocalStorage, an anonymous session ID stored insessionStorage, the pages you view, and the click events tied to checkout buttons. Referrer URLs are stripped to origin and pathname before being recorded. This information is not tied to your name or email.
• Technical data. Standard server log information such as IP address, browser user agent, and timestamps, used for diagnostics and abuse prevention.

• To process your enrollment and deliver the course you purchased.
• To send transactional messages (such as the Stripe receipt and course access information) to the email you provided at checkout.
• To match your purchase to your account on the course portal at psychonutrition-level-1.replit.app.
• To understand how the storefront is used in aggregate so we can improve it.
• To comply with our legal and tax obligations.

We do not sell your personal information. We do not share it with advertising networks or data brokers.

All payments are processed by Stripe, Inc. Your payment card information is collected on Stripe-hosted checkout pages and is transmitted directly to Stripe; it never touches our servers. Stripe's handling of your information is governed by its own privacy policy at stripe.com/privacy. Stripe also sends you a receipt email automatically after a successful payment.

We use first-party browser storage (localStorage and sessionStorage) for two purposes only: maintaining the anonymous analytics IDs described above, and remembering your administrator session if you are signed in to the admin area. We do not use third-party advertising cookies or cross-site trackers.

Order and payment records are retained by Stripe in accordance with their policies and applicable tax and accounting law. Anonymous analytics events are retained for as long as they are useful for product improvement. You may request deletion of any personal information we hold by contacting us at the address below.

Depending on where you live, you may have the right to access, correct, port, or delete the personal information we hold about you, and to object to or restrict certain uses of it. Residents of the European Economic Area, the United Kingdom, California, and other jurisdictions with comparable laws may exercise these rights by contacting us. We will respond within the time frame required by applicable law.

The CPsyN™ storefront is intended for credentialed adult healthcare professionals. It is not directed to children, and we do not knowingly collect personal information from anyone under the age of 18.

We use industry-standard safeguards, including TLS for data in transit and access controls on our systems, to protect the information we hold. No method of transmission or storage is perfectly secure, but we take security seriously and review our practices regularly.

Our infrastructure and our payment processor are based in the United States. If you access the site from outside the U.S., you understand that your information will be transferred to and processed in the United States and other jurisdictions where our service providers operate.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Material changes will be announced on this page in advance of taking effect.

Questions about this Privacy Policy or about the information we hold about you can be sent to us through newapproach.health. We answer every inquiry personally — usually within one business day.