Back to home

Privacy Notice

Last updated: August 22, 2026

This Privacy Notice explains how Paige McCalmon, DNP, FNP-C ("Seller, " "we," "us," or "our") collects, uses, and protects your personal data when you visit our website or purchase the GLP-1 Muscle & Hair Preservation Protocol (the "Service"). The Seller is the data controller responsible for your personal data.

1. Personal Data We Collect

We collect the following categories of personal data:

  • Contact and account data: Your name and email address, provided when you purchase the Service or contact us for support.
  • Payment and transaction data: Order details, transaction ID, and purchase history. Payment card information is collected and processed by our Merchant of Record, Paddle—we do not store your card details.
  • Support communications: The content of emails or messages you send us when requesting help or a refund.
  • Usage and telemetry data: Pages visited, time on site, referring URL, and approximate location derived from your IP address. This is collected through analytics tools to help us understand how the Service is used.
  • Device and technical data: Browser type, device type, operating system, and IP address.

2. How We Use Your Personal Data

We use your personal data for the following purposes:

  • Providing the Service: Processing your order, delivering download links, and granting access to purchased materials (contract performance).
  • Customer support: Responding to your questions, refund requests, and service inquiries (contract performance and legitimate interests).
  • Security and fraud prevention: Verifying transactions and protecting against unauthorized access or fraudulent activity (legitimate interests).
  • Product improvement: Analyzing usage patterns to improve the Service and develop new content (legitimate interests).
  • Legal compliance: Meeting our legal and tax obligations, including record retention as required by law (legal obligation).

3. Legal Basis for Processing

Where the EU/UK GDPR applies, our legal bases for processing your personal data are: (a) contract performance—processing necessary to fulfill your purchase and deliver the Service; (b) legitimate interests—security, fraud prevention, and product improvement; (c) legal obligation—tax and regulatory compliance; and (d) consent—where you have opted in to specific activities such as marketing communications.

4. Data Sharing & Recipients

We may share your personal data with the following categories of recipients:

  • Merchant of Record (Paddle): Paddle acts as the Merchant of Record for the sale of the Service and handles subscription management, payments, tax compliance, and invoicing. Paddle receives your name, email, and payment information to process your order.
  • Service providers and subprocessors: Hosting providers, analytics tools, and email delivery services that help us operate and maintain the Service.
  • Professional advisers: Legal, accounting, and tax professionals where necessary for business operations.
  • Authorities where required by law: We may disclose personal data where required to comply with a legal obligation or court order.

We do not sell your personal data to third parties. Paddle's privacy practices are described in Paddle's Privacy Policy.

5. International Data Transfers

The Seller is based in the United States. Your personal data may be processed in the United States or in other countries where our service providers operate. If you are located in the UK or EEA, we will take appropriate measures to protect your data, such as relying on Standard Contractual Clauses or other recognized safeguards, and only transferring data to countries that provide an adequate level of protection or have implemented appropriate safeguards.

6. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described in this notice. Transaction and order records are retained as required for tax and legal compliance, typically for up to seven (7) years. Support communications are retained for up to two (2) years. Usage data is retained for up to 24 months. When your data is no longer needed, it is deleted or anonymized.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request that we correct inaccurate or incomplete data.
  • Erasure: Request that we delete your personal data, subject to legal retention obligations.
  • Restriction: Request that we limit processing of your data in certain circumstances.
  • Portability: Request a machine-readable copy of your personal data to transfer to another provider.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
  • Complain to a supervisory authority: You have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at paigemccalmonfnp@gmail.com. We will respond to your request within one (1) month.

8. Security

We take appropriate technical and organizational measures to protect your personal data, including encryption of data in transit (TLS/SSL), secure access controls, and regular reviews of our security practices. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Cookies

Our website uses cookies and similar technologies for the following purposes:

  • Essential cookies: Required for the website to function, such as maintaining your session.
  • Analytics cookies: Help us understand how visitors use the site so we can improve it.
  • Marketing cookies: May be used to deliver relevant content, if you have consented.

You can manage or disable cookies through your browser settings. Essential cookies cannot be disabled as they are necessary for the site to function.

10. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to This Notice

We may update this Privacy Notice from time to time. The "Last updated" date at the top of this page reflects the most recent revision. We encourage you to review this notice periodically.

12. Contact

If you have any questions about this Privacy Notice or your personal data, please contact the Seller at paigemccalmonfnp@gmail.com.