Privacy Policy

1. Who we are

This website is operated by the team behind the 12-Minute Body Protocol. If you have questions about this policy or your personal data, contact us at support@protocol.com.

2. What data we collect

We collect the following personal data:

• Email address — provided by you at checkout so we can deliver the product and communicate about your purchase.
• Tracking and analytics data — if you accept cookies, we use Meta Pixel and TikTok Pixel to understand how visitors interact with our site and measure the effectiveness of our advertising. These tools may collect your IP address, browser type, pages visited, and interactions with our content.
• Attribution data — we may track which marketing source referred you to our site (via URL parameters) to understand which campaigns are effective.

3. How we use your data

• To deliver the digital product you purchased.
• To send you transactional communications related to your purchase.
• To measure and improve our advertising and website performance.
• To comply with legal obligations.

4. Legal basis for processing

We process your personal data based on: (a) the performance of a contract when you make a purchase; (b) your consent when you accept tracking cookies; and (c) our legitimate interest in understanding website performance and preventing fraud.

5. Third-party services

We share data with the following third parties, solely for the purposes described above:

• Meta (Facebook) — advertising measurement via Meta Pixel.
• TikTok — advertising measurement via TikTok Pixel.
• Payment processor — to process your payment securely. We do not store your payment card details.

6. Cookies and tracking

When you first visit our site, we display a consent banner. Tracking pixels are only loaded after you explicitly accept. Your consent preference is stored in your browser's local storage. You can withdraw consent at any time by clearing your browser's local storage or site data for this domain.

7. Data retention

We retain your email address for as long as necessary to fulfill our contractual obligations and for a reasonable period afterward to comply with legal requirements. Analytics data collected by third-party pixels is subject to the retention policies of those platforms.

8. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Request deletion of your data.
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).

To exercise any of these rights, contact us at support@protocol.com. We will respond within 30 days.

9. International transfers

Your data may be processed in countries other than your own. When this happens, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

10. Children's privacy

Our product is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have collected data from a minor, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this privacy policy from time to time. When we do, we will revise the "last updated" date at the top of this page. We encourage you to review this policy periodically.

12. Contact

For any questions, concerns, or requests related to this privacy policy or your personal data, please contact us at support@protocol.com.