Privacy Notice
You are already sharing more health information than you want to. Here is exactly what we hold, and why.
- Effective date:
- August 11, 2026
- Last updated:
- August 14, 2026
Who we are
The Atypical Advocate is the data controller for the personal data described here — meaning we decide what is collected and why. You can reach us about anything in this notice at atypicaladvocate@gmail.com.
What we collect, and why
- Your email address — when you buy the course, so we can send your access link and let you recover it later. Basis: performing our contract with you.
- Purchase record — the order reference, amount, currency, and your access token, so we can confirm what you bought and restore your access. Basis: performing our contract, and our legal obligation to keep sales records.
- What you type into the free tools — symptoms in the Symptom Matcher, answers in the FMLA Wizard. These are processed to produce your result. Basis: performing the service you asked for.
- Support messages — if you email us, we keep the message and our reply. Basis: our legitimate interest in answering you.
- Technical and usage data — IP address, browser and device type, pages visited, and error logs. Basis: our legitimate interest in keeping the site secure, preventing fraud and abuse, and fixing what is broken.
We do not sell your personal data, we do not use it to build advertising profiles, and we never share health-related information you enter with employers, insurers, or data brokers.
Payment information
We never see or store your card details. Our order process is conducted by our online reseller Paddle.com, which is the Merchant of Record for all our orders and collects your payment information directly.
Who we share data with
- Paddle, as Merchant of Record, for selling the course, processing payments, invoicing, tax compliance, and handling refunds and billing questions.
- Service providers we rely on to run the site — hosting, our database, and the service that sends your course email. They process data only on our instructions.
- Professional advisers, such as accountants or lawyers, where genuinely needed.
- Authorities, where we are legally required to disclose information.
How long we keep it
- Purchase records — for as long as you may need access, and up to seven years afterwards where tax and accounting rules require it.
- Support emails — up to two years.
- Technical logs — a short period, typically no more than 90 days.
When data is no longer needed, we delete or anonymise it.
Your rights
Depending on where you live, you can ask us to:
- give you a copy of the personal data we hold about you;
- correct it or delete it;
- restrict or stop how we use it;
- send it to you in a portable format;
- withdraw consent, where we relied on it.
If you are in the US, you also have the right not to be treated differently for using these rights — we do not sell or share personal data for cross-context behavioural advertising.
The easiest way is the data request form — it takes a minute and goes straight to us. You can also email atypicaladvocate@gmail.com. Either way we will respond within one month. If you are in the UK or EEA, you also have the right to complain to your local data protection authority.
International transfers
We and our providers are based in, or store data in, the United States. If you access the service from the UK or EEA, your data will be transferred there, protected by appropriate safeguards such as Standard Contractual Clauses.
Security
We use appropriate technical and organisational measures to protect your data:
- encryption in transit;
- access controls on our database;
- course access links that are long, random, and revocable.
No system is perfectly secure, but we take this seriously — especially given how sensitive health information is.
Cookies
We use only essential cookies and similar storage needed to make the site work — for example, keeping your course access working as you move between pages, and the cookies Paddle sets during checkout. These cannot be turned off. We do not use advertising or cross-site tracking cookies. Anything beyond the essentials is optional, and we only use it if you accept it on the cookie banner. You can change your mind at any time below, or block and clear cookies in your browser settings, though parts of the site may stop working if you do.
Your cookie choice
Loading your saved choice…
Deleting removes the aa_cookie_consent cookie and every saved cookie setting from this browser in one click. Optional scripts stop immediately and the banner comes back.
Children
This service is intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has given us data, contact us and we will delete it.
Changes
If we change this notice, we will update the date at the top of this page. Significant changes affecting how we use your data will be communicated by email where we have one.
How to contact us
For questions about this notice or to exercise your privacy rights, and for any formal legal notices, reach The Atypical Advocate at atypicaladvocate@gmail.com. We aim to reply within two business days.
