1. Who processes your data
The data operator is the Back2Life / Skills of Living Life project. Contact details for privacy requests appear at the end of this document.
This policy applies to the website, personal account, booking forms, payments, reviews, and contact messages.
2. Information we collect
We may receive your name, email, language, time zone, booking and payment status, program responses, messages and reviews, plus technical browser and device information.
Card details are processed by payment providers. Back2Life does not store full card numbers or security codes.
- Account and authentication details
- Bookings for practices, programs, coaching, and retreats
- Messages, reviews, and program reflections
- Payment status and transaction references
- Technical and analytics data, only after consent
3. How information is used
Information is used to create accounts, arrange and confirm bookings, provide materials, send service messages, answer requests, process payments, and meet legal obligations.
Analytics is used to improve the site's structure and content only after separate consent.
4. Legal bases and retention
Depending on your jurisdiction, processing may rely on contract performance, consent, legal obligation, or legitimate interests. Information is kept only as long as necessary for its stated purpose and mandatory accounting or legal periods.
You can withdraw analytics consent by clearing local site settings or changing your cookie choice.
5. Storage and security
The application may be hosted by Vercel, with database and authentication services provided by Supabase. These providers may process information in different regions and rely on contractual safeguards for international transfers.
Access is limited through technical roles, row-level policies, and encrypted connections. No system is completely secure, but reasonable organizational and technical measures are used.
6. Service providers and disclosures
Information may be shared only with providers needed to operate the service, including hosting, database, email, and payment providers, or with authorities where legally required.
We do not sell personal information. Advertising profiling is not used at the time this template is published.
7. Your rights
You may request access, correction, deletion, restriction, portability, or withdrawal of consent where the applicable law provides these rights.
We may need to verify your identity before fulfilling a request. Responses are provided within the period required by applicable law.
8. Russia: 152-FZ
For users in Russia, processing should comply with Federal Law No. 152-FZ on Personal Data, including a valid legal basis, notice to data subjects, and localization requirements where applicable.
Before launch, the operator's country and legal status, the location of primary collection for Russian citizens, the consent form, and any Roskomnadzor notification requirements must be confirmed separately.
9. European Economic Area: GDPR
EEA users may have rights to access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority.
Where processing is based on consent, it can be withdrawn without affecting processing that occurred before withdrawal.
10. California: CCPA/CPRA
California residents may have rights to know categories and sources of information, request access or deletion, correct inaccurate data, limit use of sensitive information, and opt out of sale or sharing where these laws apply to the operator.
Back2Life will not discriminate against users for exercising legally protected privacy rights.
11. Cookies and local storage
Essential technologies support language, authentication, security, and saved preferences. Optional Google Analytics loads only after consent.
Your choice is stored locally in your browser. You may remove it in browser settings, after which the banner will appear again.
12. Children
The service is not intended for independent use by children below the age of digital consent in their country. If a child's information was provided without proper authorization, contact us for deletion.
13. Policy changes
This policy may be updated when services, providers, or laws change. The current revision date appears at the top of the page.
Privacy requests
To request access, correction, deletion, or withdrawal of consent, use the email listed on the contact page. Before launch, add the operator's legal name, address, and a working privacy request email here.