Privacy Notice

Last updated: July 6, 2026

1. Who we are

Optimal Life Imaging Group ("we", "us", "our"), based in Pennsylvania, USA, operates the Screens to Success course (the "Service"). We are the data controller for personal data we collect about you in connection with the Service.

2. What personal data we collect

Account data: name, email address, login credentials (passwords are stored hashed, never in plain text).
Course activity: which lessons you've viewed, worksheet downloads, and any responses you save in your account.
Support communications: messages you send us, including their contents and any attachments.
Technical & usage data: IP address, browser type, device identifiers, operating system, pages visited, timestamps, and basic analytics.
Payment data: card and billing details are collected and processed directly by our payment processor, Stripe. We do not see or store your full card details. We receive limited transaction information from Stripe (e.g. order ID, status, last 4 digits, billing country) to grant course access and maintain our records.

3. Why we use your data (purposes & legal bases)

To provide the Service (account creation, course access, worksheet delivery) — legal basis: performance of a contract.
To process payments and grant course access via Stripe — legal basis: performance of a contract.
Security & fraud prevention (detecting abuse, protecting accounts) — legal basis: legitimate interests.
Product improvement & analytics (understanding how the course is used) — legal basis: legitimate interests.
Customer support — legal basis: legitimate interests / performance of a contract.
Marketing emails about our courses (only when you have opted in) — legal basis: consent, which you can withdraw at any time.
Legal & compliance obligations — legal basis: legal obligation.

4. Who we share data with

Stripe, Inc. — our payment processor. Stripe processes card payments, handles fraud checks, calculates and collects applicable taxes, and provides receipts. See Stripe's Privacy Policy.
Hosting & infrastructure providers (cloud hosting, database, file storage) acting as our processors.
Analytics & support tooling we use to operate and improve the Service.
Professional advisers (legal, accounting) where reasonably necessary.
Authorities where required by applicable law, court order, or to protect our rights.

We do not sell your personal data.

5. International transfers

We are based in the United States, and our service providers may process data in the U.S. or other countries. Where personal data is transferred from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to protect your data.

6. Data retention

We keep account and course data for as long as your account is active. After account closure, we retain data only as long as needed for legitimate business purposes (e.g. tax records, dispute resolution) or as required by law, and then delete or anonymise it.

7. Your rights

Subject to applicable law, you have the right to:

Access the personal data we hold about you;
Request correction of inaccurate data;
Request deletion of your data;
Restrict or object to certain processing;
Receive a copy of your data in a portable format;
Withdraw consent at any time, where we rely on consent;
If you are in the UK or EEA, lodge a complaint with your local data protection supervisory authority.

California residents have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information. We do not sell personal information.

We aim to respond to verified requests within a reasonable timeframe (typically 30 days). To exercise your rights, contact us through the support channel on our site.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (HTTPS), encrypted storage, access controls, and row-level security on our database. No system is 100% secure; we encourage you to use a strong, unique password.

9. Cookies

We use a minimal set of cookies and similar technologies. These include:

Strictly necessary cookies for authentication and session management. These cannot be turned off.
Analytics cookies to understand how the Service is used. Where required by law, we ask for your consent before setting these.

You can manage cookies through your browser settings. Blocking strictly necessary cookies will prevent the Service from working correctly.

10. Children

The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to this Notice

We may update this Privacy Notice from time to time. We will post the updated version with a new "Last updated" date and, where changes are material, notify you.

12. Contact

For privacy questions or to exercise your rights, contact Optimal Life Imaging Group, PA through the support channel on our site.