Alchemy Privacy Policy - Self Mastery and Beyond

EFFECTIVE DATE: May 2025

The following Privacy Policy governs the online information collection practices of Self Mastery and Beyond (“we” or “us”), legally registered in Stockholm, Sweden, operating through the website located at https://selfmasteryandbeyond.com (the “Site”), and the ways in which we use this information. This Privacy Policy does not apply to any information you may provide to us or that we may collect offline and/or through other means (for example, at a live event, via telephone, or through the mail).

Please read this Privacy Policy carefully. By visiting and using the Site, you agree that your use of our Site, and any dispute over privacy, is governed by this Privacy Policy. Because the Web is an evolving medium, we may need to change our Privacy Policy at some point in the future, in which case we’ll post the changes to this Privacy Policy on this website and update the Effective Date of the policy to reflect the date of the changes. By continuing to use the Site after we post any such changes, you accept the Privacy Policy as modified.

This Site strives to offer its visitors the many advantages of Internet technology and to provide an interactive and personalized experience. We may use Personally Identifiable Information (your name, e-mail address, billing information) subject to the terms of this privacy policy. We will never sell, barter, or rent your email address to any unauthorized third party.

1. How We Collect and Use Information

We may collect and store personal or other information that you voluntarily supply to us online while using the Site (e.g., submitting forms via Leadpages, signing up for newsletters via ConvertKit, or purchasing a product through Stripe, PayPal, or Thrivecart). This information may include your name, email address, phone number, billing address, and country or state of residence.

We may also automatically collect certain technical data when you browse the Site, including your IP address and usage patterns, for purposes such as improving the Site and tracking trends. Tools such as Google Analytics and Facebook Pixel may be used to help us understand user behavior and to deliver targeted marketing content.

We may use cookies, which are small files stored by your browser to help track preferences and improve user experience. You can manage your cookie settings through your browser. Vimeo may also collect usage data if you interact with embedded video content on the Site.

We may share information with authorized team members, coaches, and our Facebook Ads Manager, solely for purposes of running our business. This includes email communications, community engagement, and marketing purposes.

We may also collect personal or other information that you voluntarily supply to us through our online community platform in Mighty Networks.

You can read more about how third-party providers use your information at their respective privacy policy links:

Leadpages for landing pages and opt-ins
ConvertKit for email marketing
Stripe, PayPal, and Thrivecart for payment processing
Mighty Networks for course delivery and community hosting
Google Analytics for site analytics
Facebook Pixel for retargeting and ad tracking
Vimeo for video hosting

2. How Do We Store Your Information?

NEWSLETTERS
Your personal data is stored via ConvertKit, our email marketing service, and can only be accessed by team members responsible for email communications. Every email includes an unsubscribe link to opt out at any time.

ONLINE PURCHASES
We do not store any payment details directly. All transactions are processed through third-party payment platforms such as Stripe, PayPal, and Thrivecart. Please refer to their respective privacy policies for more information on how they store and protect your data.

WEBSITE SECURITY
We use SSL encryption and store data offsite through our service providers to help protect your information from unauthorized access.

3. Children’s Online Privacy Protection Act Compliance

This section explains our practices regarding the collection and use of personal information from children under the age of thirteen and outlines their rights under applicable federal law.

This Site is not directed to children under the age of thirteen, and we do not knowingly collect personally identifiable information from anyone in this age group. We take reasonable steps to screen users who submit personal information to ensure they are at least thirteen years old. If we discover that we have inadvertently collected personal data from a child under the age of thirteen, we will promptly delete such information from our records.

In the event that our policies change in the future, we will not collect personally identifiable information from children under the age of thirteen without first obtaining verifiable parental consent in accordance with COPPA.

Because we do not collect such information from children under thirteen, we do not knowingly disclose, share, or distribute it to third parties. Additionally, we do not knowingly permit children under thirteen to post or otherwise publicly share personally identifiable information on or through the Site.

We also do not condition a child’s participation in any online activity on the Site on the disclosure of more personal information than is reasonably necessary to participate in such activity.

4. General Data Protection Regulation (“GDPR”)

If your country of residence is part of the European Union, you may have certain rights concerning your personal data under the General Data Protection Regulation (GDPR). For more details, you can visit the official regulation here: https://eur-lex.europa.eu/eli/reg/2016/679/oj

Under certain circumstances, you have the right to:

Request access to your personal data (also known as a “data subject access request”). This allows you to receive a copy of the personal data we hold about you and verify that we are processing it lawfully.
Request correction of the personal data we hold about you. This gives you the ability to have any incomplete or inaccurate information we have corrected. We may need to verify the accuracy of the new data you provide.
Request erasure of your personal data. You may ask us to delete or remove your personal data where there is no valid reason for us to continue processing it. This right also applies if you’ve successfully objected to the processing, we’ve processed your data unlawfully, or we’re required to erase your data under local law. Please note that in some cases, we may not be able to fulfill your request due to legal obligations, which we will communicate at the time of your request if applicable.
Object to processing of your personal data where we rely on a legitimate interest (ours or a third party’s) and there is something about your particular situation that makes you want to object to such processing, as it impacts your fundamental rights and freedoms. You also have the right to object when we are processing your data for direct marketing purposes. In some instances, we may demonstrate compelling legitimate grounds to continue processing.
Request restriction of processing of your personal data. This allows you to request that we suspend the processing of your personal data if:
(a) you want us to verify the data’s accuracy;
(b) our use of the data is unlawful, but you do not want us to erase it;
(c) you need us to hold the data even if we no longer need it, as you require it to establish, exercise, or defend legal claims; or
(d) you have objected to our use of your data, but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer of your personal data to you or to a third party. We will provide your data in a structured, commonly used, and machine-readable format. This right only applies to automated information that you initially consented for us to use or where we used the data to perform a contract with you.
Withdraw consent at any time where we rely on your consent to process your personal data. This will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain services to you. We will inform you if this is the case at the time of withdrawal.

You will not be charged to access your personal data or exercise any of your rights. However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. Alternatively, we may refuse to comply with your request in such circumstances.

To protect your data, we may need to verify your identity before fulfilling your request. This is a security measure to ensure that personal data is not disclosed to anyone who is not entitled to access it. We may also contact you to request additional information to help expedite our response.

We aim to respond to all legitimate requests within one month. If your request is particularly complex or you’ve made multiple requests, it may take us longer. In such cases, we will notify you and keep you updated.

To exercise your rights, please contact us at: support@selfmasteryandbeyond.com

PROVISION OF PERSONAL DATA AND FAILURE TO PROVIDE PERSONAL DATA

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide our services). In such cases, we may be unable to provide certain products or services to you.

OUR ROLE AS DATA CONTROLLER AND DATA PROCESSOR

Self Mastery and Beyond is both a data controller and processor of your personal data. We determine the purposes and methods of processing your data while also processing it for service delivery.

LEGAL BASIS FOR OUR PROCESSING OF YOUR PERSONAL DATA

We rely on the following lawful bases under the General Data Protection Regulation (GDPR) to process your personal data:

Legitimate Interest – This means the interest of our business in conducting and managing our services to provide you with the best possible experience in a secure way. We ensure we consider and balance any potential impact on you and your rights before processing your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you unless we have your consent or are otherwise permitted by law.
Performance of a Contract – Processing your data is necessary for the performance of a contract with you or to take steps at your request before entering into such a contract.

Compliance with Legal Obligations – We may process your personal data to comply with legal or regulatory requirements that apply to us.

You may contact us at support@selfmasteryandbeyond.com if you would like more details on the specific legal basis we are relying on for any given data processing activity.

WITHDRAWING YOUR CONSENT

Where we are relying on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out before your withdrawal. If you withdraw your consent, we may not be able to provide certain services to you. We will inform you if this is the case at the time you withdraw your consent.

To withdraw your consent, please email us at: support@selfmasteryandbeyond.com

5. CALIFORNIA ONLINE PRIVACY PROTECTION ACT (CalOPPA)

Under California law, California residents have the right to request the following from businesses with whom they have an established business relationship:

(a) A list of the categories of personally identifiable information (such as name, email address, and mailing address) and the type of services provided that have been disclosed to third parties (including affiliates that are separate legal entities) during the immediately preceding calendar year for the third parties’ direct marketing purposes; and
(b) The names and addresses of all such third parties.

To request this information, please contact us at: support@selfmasteryandbeyond.com
If you do not want your personally identifiable information shared with any third party for direct marketing purposes, you may opt out of such disclosures by emailing us at the address above.

For more information, you may visit: https://consumercal.org/about-cfc/cfc-education-foundation/california-online-privacy-protection-act-caloppa-3/

6. DISCLAIMER

We may update or modify this policy at any time at our discretion. If we make changes to this policy, we will update the information on this page. We encourage you to review this policy periodically to stay informed of how we are protecting your data.

If you have any questions or concerns about this privacy policy, please contact us at: support@selfmasteryandbeyond.com