Privacy Policy

Last updated: November 12, 2026

In short: your assessment answers, Reality Journal entries and course progress stay on your own device – they are never sent to us. We do not use advertising trackers or analytics, and we never sell or share your personal information.

1. Who is responsible for your data

Antonia Morgan, M.S.
Moldavská cesta 666/2A, 040 11 Košice, Slovakia (European Union)
Email: [email protected]
Website: antoniamorgan.com

We are the “controller” of personal data processed through this Site under the EU General Data Protection Regulation (GDPR).

2. Data that stays on your device

Assessments, reports, the Reality Journal and course progress run in your browser. Your answers, scores, entries and progress are stored only in your browser’s local storage on your device. We cannot see, access or recover them. You can delete them at any time by clearing your browser’s site data for antoniamorgan.com. If you use a shared device, please clear this data after use.

3. Data we process

Website hosting and security. The Site is hosted by Cloudflare, which processes technical data such as your IP address, browser type and request times to deliver the Site and protect it against attacks. Legal basis: our legitimate interest in a secure, working website (GDPR Art. 6(1)(f)).
Purchases. When you buy a report or course, Payhip (our e-commerce platform) and Stripe or PayPal (payment processors) process your name, email address, billing country, order details and payment information. We receive your name, email and order details to deliver your purchase, provide support and keep accounting records. Legal bases: performance of a contract (Art. 6(1)(b)) and legal obligations such as tax and accounting rules (Art. 6(1)(c)).
Emails you send us. We use your message and email address to reply. If you choose to tell us about your health or personal experiences, we process that information only to answer you, based on your explicit consent (Art. 9(2)(a)), which you can withdraw at any time.
Fonts. Pages load fonts from Google Fonts, which means your IP address is transmitted to Google when a page loads (legitimate interest in consistent, readable design).

We do not use your data for profiling or automated decision-making, and we do not send marketing emails unless you have opted in.

4. Cookies and local storage

We do not set advertising or analytics cookies. We use your browser’s local storage only for the functions described in Section 2, which are strictly necessary to provide the features you request. On pages with a “Buy” or “Enroll” button, Payhip’s checkout script may set cookies that are necessary for a secure checkout. Because we use no non-essential cookies, we do not show a cookie consent banner.

5. Who receives data

Only the service providers named above (Cloudflare, Payhip, Stripe, PayPal, Google for fonts), our email provider, and – where legally required – tax authorities or our accountant. Some providers are located in the United States. Transfers are protected by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

6. How long we keep data

Order and invoice records: as long as tax and accounting laws require (up to 10 years). Emails: as long as needed to answer you and handle any follow-up, then deleted. Hosting logs: according to Cloudflare’s short retention periods.

7. Your rights

You have the right to access, correct, delete, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. Email us at [email protected]; we reply within one month. You may also complain to a data protection authority – in Slovakia the Úrad na ochranu osobných údajov SR (dataprotection.gov.sk), or the authority in the country where you live.

8. Privacy rights in the United States

We honor privacy requests from all US residents, including requests to know, access, correct or delete personal information, regardless of whether a specific state law applies to us. We do not sell or share personal information for cross-context behavioral advertising, and we do not use “sensitive personal information” to infer characteristics about you. Because assessment answers never leave your device, we do not collect “consumer health data” on our servers (for example under Washington’s My Health My Data Act). California residents may request information under “Shine the Light”; we do not disclose personal information to third parties for their direct marketing. Do Not Track: we do not track you across other websites, so we treat all visitors the same whether or not a Do-Not-Track or Global Privacy Control signal is sent.

9. Children

The Site is not directed to anyone under 18, and we do not knowingly collect personal information from children under 13 (COPPA). If you believe a child has provided us data, contact us and we will delete it.

10. Security

The Site is served only over encrypted HTTPS connections. Payments are handled by PCI-DSS compliant providers.

11. Changes

We will post any changes to this policy on this page with a new “last updated” date.