Privacy Policy

1. Introduction

Mama Olisakwe's Fibroid Melter Protocol ("we," "us," "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website or purchase our digital products.

By using our website or purchasing our products, you acknowledge that you have read and understood this Privacy Policy.

2. Who We Are (Data Controller)

For the purposes of UK data protection legislation, the data controller is:

• Business Name: Mama Olisakwe's Fibroid Melter Protocol
• Contact Email: mamaolisakwe@gmail.com
• Country: United Kingdom

We are responsible for deciding how we hold and use personal information about you. We are required under data protection legislation to notify you of the information contained in this Privacy Policy.

3. What Personal Data We Collect

3.1 Information You Provide Directly

When you purchase our digital products, we collect:

3.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• Technical Data: IP address, browser type and version, device type, operating system
• Usage Data: Pages visited, time spent on pages, links clicked, referring website
• Location Data: Approximate geographic location based on IP address

3.3 Special Category Data

We do NOT intentionally collect special category data (also known as sensitive personal data) such as:

• Health information about specific diagnoses or conditions
• Racial or ethnic origin
• Religious or philosophical beliefs
• Sexual orientation

4. How We Use Your Personal Data

We use your personal data for the following purposes:

4.1 To Fulfill Your Order

• Process your payment
• Deliver digital products via email and Google Drive
• Send purchase confirmation and access instructions
• Provide access to our WhatsApp community (if you choose to join)

4.2 To Provide Customer Support

• Respond to your inquiries and support requests
• Troubleshoot technical issues with product access
• Process refund requests
• Answer questions about the protocol

4.3 To Improve Our Products and Services

• Analyze usage patterns to improve our website and digital products
• Understand customer needs and preferences
• Develop new products and features

4.4 To Comply with Legal Obligations

• Maintain records for accounting and tax purposes
• Respond to legal requests from authorities
• Protect our legal rights and prevent fraud

4.5 Marketing (With Your Consent)

We may send you marketing emails about similar products or services, but only if you have not opted out. You can unsubscribe at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Emailing us at mamaolisakwe@gmail.com with "Unsubscribe" in the subject line

5. Legal Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following legal bases:

5.1 Contract Performance (Article 6(1)(b))

Processing is necessary to fulfill our contract with you when you purchase our digital products. This includes:

• Delivering the digital products you ordered
• Processing payments
• Providing customer support
• Processing refunds

5.2 Legitimate Interests (Article 6(1)(f))

We have a legitimate business interest in:

• Analyzing website usage to improve our services
• Preventing fraud and protecting our business
• Marketing similar products to existing customers (unless you opt out)

5.3 Legal Obligation (Article 6(1)(c))

We must process certain data to comply with legal obligations, such as:

• Maintaining financial records for tax purposes
• Responding to lawful requests from authorities

5.4 Consent (Article 6(1)(a) and Article 9(2)(a))

Where we process special category data (e.g., health information you voluntarily provide for customer support), we rely on your explicit consent. You can withdraw consent at any time by contacting us.

6. Third-Party Services and Data Sharing

We share your personal data with trusted third-party service providers who help us operate our business. These third parties process data on our behalf and are bound by data processing agreements.

6.1 Payment Processor: Stripe

• Purpose: Process payments securely
• Data Shared: Name, email, payment card details
• Location: USA (Stripe has UK GDPR-compliant data processing agreements and UK adequacy)
• Privacy Policy: https://stripe.com/gb/privacy

Important: We do NOT store your payment card details. Stripe handles all payment processing in compliance with PCI DSS standards.

6.2 Content Delivery: Google Drive

• Purpose: Store and deliver digital products
• Data Shared: Email address (to provide access to files)
• Location: USA (Google has UK GDPR-compliant data processing agreements)
• Privacy Policy: https://policies.google.com/privacy

6.3 Communication: Email Service Provider

• Purpose: Send purchase confirmations and customer support emails
• Data Shared: Name, email address, order details

6.4 Community Platform: WhatsApp (Optional)

• Purpose: Provide access to our private support community
• Data Shared: Phone number, name (only if you choose to join)
• Privacy Policy: https://www.whatsapp.com/legal/privacy-policy

Joining our WhatsApp community is entirely optional. You can access and use our digital products without joining.

6.5 We Do NOT Sell Your Data

7. How We Protect Your Data

We take data security seriously and implement appropriate technical and organizational measures to protect your personal data:

7.1 Technical Measures

• Encryption: All data transmitted through our website is encrypted using HTTPS/SSL
• Secure Payment Processing: Payments are processed by Stripe with PCI DSS Level 1 certification
• Access Controls: Only authorized personnel have access to personal data
• Regular Backups: Data is regularly backed up to prevent loss

7.2 Organizational Measures

• Data Minimization: We only collect data necessary for our services
• Confidentiality: All team members are bound by confidentiality obligations
• Third-Party Vetting: We carefully vet all third-party service providers for security

7.3 Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify the Information Commissioner's Office (ICO) within 72 hours
• Notify affected individuals without undue delay
• Take immediate steps to contain and remedy the breach

8. How Long We Keep Your Data

We only retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

After the retention period expires, we will securely delete or anonymize your personal data.

9. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal data:

9.1 How to Exercise Your Rights

To exercise any of these rights, please contact us at mamaolisakwe@gmail.com with:

• Your full name and email address used for purchase
• Description of the right you wish to exercise
• Any relevant details to help us locate your data

9.2 Response Time

We will respond to your request:

• Within 1 month of receiving your request
• We may extend this by 2 additional months if the request is complex
• We will keep you informed of any delays

9.3 Verification

To protect your privacy, we may ask you to verify your identity before fulfilling your request. This is a security measure to ensure personal data is not disclosed to unauthorized persons.

9.4 No Fee (Usually)

We will not charge a fee to exercise your rights unless:

• Your request is clearly unfounded or excessive
• You request multiple copies of the same information

10. Cookies and Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us provide a better user experience and understand how our website is used.

10.2 Types of Cookies We Use

Essential Cookies (Always Active)

These cookies are necessary for the website to function and cannot be switched off:

• Session management
• Security features
• Shopping cart functionality

Analytics Cookies (With Consent)

These cookies help us understand how visitors use our website:

• Pages visited
• Time spent on site
• Traffic sources

10.3 Managing Cookies

You can control cookies through your browser settings:

• Block all cookies
• Accept only first-party cookies
• Delete cookies after each session

Note: Blocking essential cookies may affect website functionality.

10.4 Third-Party Cookies

Some third-party services (like Stripe) may set their own cookies. We have no control over these cookies. Please refer to their privacy policies for more information.

11. International Data Transfers

Some of our third-party service providers (Stripe, Google) are based in countries outside the UK, including the United States.

11.1 How We Protect International Transfers

When we transfer data internationally, we ensure adequate protection through:

• Standard Contractual Clauses: Approved by the UK government
• Adequacy Decisions: Transfers to countries deemed adequate by the UK
• Data Processing Agreements: Binding contracts with third parties

11.2 US Data Transfers

For transfers to the USA (Stripe, Google), we rely on:

• Standard Contractual Clauses (SCCs)
• Supplementary measures to protect data
• Providers' UK GDPR compliance commitments

12. Children's Privacy

Our products are intended for adults (18 years and older). We do not knowingly collect personal data from children under 18.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our data practices
• Changes in UK data protection laws
• Introduction of new services

13.1 How We Notify You

When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you by email if changes materially affect your rights
• Display a notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

14. How to Complain

We hope to resolve any privacy concerns you may have. However, you have the right to complain to the UK data protection authority:

Please try to resolve any issues with us first by contacting mamaolisakwe@gmail.com before filing a complaint with the ICO.