On this page
This Privacy Policy explains how Northvale Media LLC (“we”, “us”) collects, uses, shares and protects personal data when you visit northvalemediallc.com, our sales pages and checkout, use our web applications or contact our support. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR), the UK GDPR, Brazil’s Lei Geral de Proteção de Dados (LGPD) and U.S. state privacy laws, including the California Consumer Privacy Act as amended by the CPRA.
1.Data controller
The controller responsible for your personal data is Northvale Media LLC, a limited liability company organized in the United States.
For any privacy question or request, write to privacy@northvalemediallc.com. You can also reach us at support_team@northvalemediallc.com.
2.Data we collect
| Category | Examples | Source |
|---|---|---|
| Identity and contact | Name, e-mail address, country | You, at checkout or when you contact us |
| Order and billing | Products purchased, price, currency, date, receipt and transaction IDs, billing country and postal code | Checkout and Stripe |
| Payment card | Card details are entered on Stripe’s secure forms and processed by Stripe. We only receive limited data such as card brand, last four digits and expiry date | Stripe |
| Account and product use | Login e-mail, progress, answers, notes and preferences saved inside our web apps | You, while using the product |
| Device and technical | IP address, browser and device type, language, approximate location derived from the IP address, server logs | Automatically, by our servers and providers |
| Marketing attribution | Campaign parameters (such as UTM tags) and ad click identifiers contained in the link you used | Links, cookies and similar technologies on sales pages |
| Support messages | The content of the messages you send us and our replies | You |
We do not ask for sensitive data. If you choose to write personal reflections, health or religious information in a web app journal or a support message, we use it only to provide the service to you.
3.How we use data and legal bases
| Purpose | Legal basis (GDPR / UK GDPR / LGPD) |
|---|---|
| Process your order, create your access and send receipts | Performance of a contract |
| Provide customer support, refunds and cancellations | Performance of a contract; legitimate interests |
| Prevent fraud, abuse and security incidents | Legitimate interests; legal obligation |
| Keep tax, accounting and transaction records | Legal obligation |
| Understand how our products are used and improve them | Legitimate interests; consent where required |
| Send product updates and offers by e-mail (unsubscribe at any time) | Consent, or legitimate interests where the law allows |
| Measure the performance of our advertising | Consent where required by law |
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
6.International transfers
We are based in the United States and our providers may process data in the United States and other countries. When personal data from the European Economic Area, the United Kingdom, Switzerland or Brazil is transferred, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or the equivalent mechanisms recognized under the LGPD.
7.How long we keep data
- Orders and billing records: for as long as tax and accounting laws require, generally up to 7 years.
- Account and product-use data: while your access is active, and then for up to 24 months after your last use, unless you ask us to delete it sooner.
- Support messages: up to 3 years after the conversation ends.
- Marketing data: until you unsubscribe or withdraw consent.
After these periods, data is deleted or anonymized, unless we must keep it longer to resolve a dispute or comply with the law.
8.Security
Our websites use HTTPS encryption, card payments are handled by Stripe (certified PCI DSS Level 1), and access to personal data is limited to the people and providers who need it. No system is completely secure, but we apply reasonable technical and organizational measures and will notify you and the authorities of a data breach where the law requires it.
9.Your rights
Depending on where you live, you may have the right to:
- know whether we process your data and get a copy of it;
- correct inaccurate or incomplete data;
- have your data deleted;
- restrict or object to certain processing, including direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier processing;
- lodge a complaint with a data protection authority.
European Economic Area, United Kingdom and Switzerland
Under the GDPR and the UK GDPR you have all the rights listed above. You can complain to the supervisory authority of the country where you live or work, or, in the UK, to the Information Commissioner’s Office (ICO).
Brazil
Under the LGPD you may also request confirmation that processing exists, anonymization or blocking of unnecessary or excessive data, information about the entities we share data with, and information about the consequences of not giving consent. You can complain to the Autoridade Nacional de Proteção de Dados (ANPD).
California and other U.S. states
Residents of California and other states with comprehensive privacy laws may request to know the categories and specific pieces of personal information we collect, use and disclose; to delete or correct it; and to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising. We do not sell personal information. Advertising technologies on our sales pages may count as “sharing” under the CPRA: to opt out, e-mail privacy@northvalemediallc.com; we also honor the Global Privacy Control signal. We will not discriminate against you for exercising any of these rights, and you may use an authorized agent.
How to exercise your rights
E-mail privacy@northvalemediallc.com, preferably from the address linked to your purchase, so we can verify your identity. We respond within the time required by applicable law, generally within 30 days.
10.Children
Our products are intended for adults aged 18 or over. We do not knowingly collect personal data from children under 16. If you believe a child has given us personal data, contact privacy@northvalemediallc.com and we will delete it.
11.Changes to this policy
We may update this Privacy Policy to reflect changes in our products or in the law. The “Last updated” date shows the current version, and important changes will be highlighted on this website.
12.Contact
Privacy requests: privacy@northvalemediallc.com. General support: support_team@northvalemediallc.com. Northvale Media LLC.