1. Data Controller Information
The data controller responsible for your personal information is Potentialssymagn, located at 177 Rivington St, New York, NY 10002, USA. You may contact us regarding privacy matters at assist@potentialssymagn.world or by phone at +1 212-228-7177.
As the data controller, we determine the purposes and means of processing personal data collected through potentialssymagn.world and related communication channels. We are committed to processing data lawfully, fairly, and transparently in accordance with applicable regulations including the General Data Protection Regulation (GDPR) for European Economic Area visitors and relevant United States privacy frameworks.
2. Scope of This Policy
This Privacy Policy applies to all personal data collected through our website, contact forms, email correspondence, phone communications, and any educational programs or guidance services offered by Potentialssymagn. It does not apply to third-party websites linked from our platform, which maintain their own privacy practices.
By using our website or submitting personal information, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices, please discontinue use of our services and contact us to request deletion of any data we may hold.
3. Categories of Personal Data We Collect
3.1 Information You Provide Directly
When you complete our contact form, we collect your name, email address, and message content. If you enroll in educational programs or purchase products, we may additionally collect billing information, mailing address, and payment details processed through secure third-party payment providers.
3.2 Information Collected Automatically
When you visit our website, we may automatically collect technical data including your IP address, browser type and version, operating system, referring URL, pages viewed, time spent on pages, and device identifiers. This data is collected through cookies and similar technologies as described in our Cookie Policy.
3.3 Communication Records
We retain records of email exchanges, phone call notes, and guidance session summaries when you engage with our consulting and educational services. These records help us provide consistent support and maintain service quality.
4. Legal Basis for Processing
Under GDPR, we process personal data based on the following legal grounds:
- Consent: When you submit our contact form, accept cookies, or opt into marketing communications, you provide explicit consent for specified processing activities.
- Contractual Necessity: Processing required to fulfill educational program enrollments, deliver purchased products, or respond to service inquiries you initiate.
- Legitimate Interests: Website security, fraud prevention, service improvement, and internal analytics conducted in ways that do not override your fundamental rights.
- Legal Obligation: Processing necessary to comply with tax, accounting, or regulatory requirements applicable to our business operations.
5. Purposes of Data Usage
We use collected personal data for the following specific purposes:
- Responding to inquiries submitted through our contact form or email
- Delivering educational programs, guidance sessions, and personalized habit plans
- Processing payments and managing billing for purchased services and products
- Improving website functionality, content relevance, and user experience
- Sending service-related notifications such as enrollment confirmations and policy updates
- Conducting aggregated analytics to understand visitor behavior patterns
- Protecting against unauthorized access, fraud, and security threats
- Complying with legal obligations and responding to lawful requests from authorities
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
6. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data to third parties for marketing purposes. We may share data with the following categories of recipients when necessary:
- Service Providers: Hosting providers, email delivery services, payment processors, and analytics platforms that process data on our behalf under strict contractual obligations.
- Professional Advisors: Legal, accounting, or consulting professionals bound by confidentiality when advising on business matters.
- Legal Authorities: When required by law, court order, or governmental regulation to disclose information.
All third-party processors are required to implement appropriate security measures and process data only according to our documented instructions.
7. International Data Transfers
Potentialssymagn is based in the United States. If you access our website from the European Economic Area, United Kingdom, or other regions with data transfer restrictions, your personal data may be transferred to and processed in the United States.
We ensure appropriate safeguards for international transfers through Standard Contractual Clauses approved by the European Commission, adequacy decisions where applicable, and binding corporate rules with our service providers.
8. Data Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes described in this policy:
- Contact form submissions: Retained for twenty-four months after the last correspondence, then securely deleted.
- Program enrollment records: Retained for five years after program completion for service continuity and legal compliance.
- Payment and billing records: Retained for seven years as required by tax and accounting regulations.
- Cookie and analytics data: Retained according to periods specified in our Cookie Policy, typically between thirteen and twenty-six months.
- Marketing consent records: Retained for the duration of consent plus three years for compliance documentation.
When retention periods expire, data is securely deleted or anonymized so it can no longer be associated with you.
9. Security Measures
We implement technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for all data transmitted between your browser and our servers
- Access controls limiting data access to authorized personnel with legitimate business needs
- Regular security assessments and vulnerability monitoring of our systems
- Secure storage practices for physical and digital records
- Employee training on data protection responsibilities and incident response procedures
- Incident response protocols for detecting, reporting, and mitigating data breaches
While we strive to protect your information, no method of electronic transmission or storage is completely secure. We encourage you to use strong passwords and protect your account credentials.
10. Your Rights Under GDPR and Applicable Laws
Depending on your location, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data when no longer necessary or when you withdraw consent.
- Right to Restrict Processing: Request limitation of processing under certain circumstances.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw previously given consent at any time without affecting prior lawful processing.
- Right to Lodge a Complaint: File a complaint with your local data protection authority.
To exercise any of these rights, contact us at assist@potentialssymagn.world. We will respond within thirty days, or inform you if an extension is required. We may request identity verification before processing your request.
11. Children's Privacy
Our website and services are not directed at individuals under sixteen years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The date at the top of this page indicates when the policy was last revised. Material changes will be communicated through a notice on our website or via email to registered users.
13. Contact Information
For privacy-related inquiries, data subject requests, or concerns about our data practices, please contact:
Potentialssymagn
177 Rivington St, New York, NY 10002, USA
Email: assist@potentialssymagn.world
Phone: +1 212-228-7177