Privacy Policy

Last updated October 17, 2026

This Privacy Policy is available in multiple languages. This Canadian English (en-CA) version is the original and governing text. Translations are provided for the convenience and accessibility of readers.

In the event of any inconsistency between this version and a translated version, this Canadian English (en-CA) version shall prevail.

This Privacy Policy explains how personal data are processed in connection with authentic-self-care.com.

Data Controller

I am David Lalos, based in Norway, and I am the data controller for the personal data described in this Privacy Policy.

For questions about privacy or to exercise your data-protection rights, please contact:

contact@authentic-self-care.com

Personal Data Collected

The website is designed to collect as little personal data as reasonably possible.

There is no newsletter or mailing list, user registration or account system, contact form, or public commenting system. The website does not intentionally use behavioural advertising or analytics services such as Google Analytics, Matomo, Meta Pixel, or Google Tag Manager.

Personal data may nevertheless be processed in the following circumstances.

Website Visits

The website is hosted by Hostinger. When you visit the website, technical information may be processed automatically as part of the normal operation, security, and maintenance of the hosting service.

This information may include your IP address, browser or device information, the pages or files requested, and the date and time of requests.

Such information is used only as necessary to provide, maintain, troubleshoot, and protect the website.

Donations

Donations are handled externally by PayPal.

When you choose to make a donation, the payment transaction takes place through PayPal. PayPal processes personal data in accordance with its own privacy policies and legal obligations.

I do not collect or process your full payment-card or bank-account credentials through this website.

PayPal may provide me with information associated with a donation, which may include:

your name;
your email address;
the amount and date of the donation;
transaction and payment-status information;
a transaction identifier; and
any optional note you choose to include with the donation.

Optional notes sent through PayPal are private and are not published on the website.

Donor information is not used for marketing or promotional emails.

Email Communications

If you contact me by email, I may process the personal data contained in your message, including your name, email address, the contents of your message, and any subsequent correspondence.

Please avoid including health information or other sensitive personal information in emails or donation notes unless it is necessary for the matter you are contacting me about.

Purposes and Legal Bases for Processing

I process personal data only when there is a lawful basis for doing so.

Personal data may be processed for the following purposes:

Operating and Protecting the Website

Technical information may be processed where necessary for my legitimate interest in operating a functional, reliable, and secure website, including preventing misuse, investigating technical problems, and protecting the website and its infrastructure.

Administering Donations

Information received in connection with donations may be processed where necessary for my legitimate interest in receiving and administering voluntary donations, responding to donation-related inquiries, handling refund requests, and resolving payment issues.

Complying With Legal Obligations

Donation and transaction information may be processed and retained where necessary to comply with applicable accounting, tax, financial, or other legal obligations.

Responding to Communications

Personal data contained in emails may be processed where necessary for my legitimate interest in responding to communications and handling requests appropriately.

Where a communication concerns the exercise of a legal right or another matter that I am legally required to address, the information may instead or additionally be processed because this is necessary to comply with a legal obligation.

Cookies and Similar Technologies

The website does not intentionally use analytics, advertising, marketing, or behavioural-tracking cookies or similar technologies.

Strictly necessary technical storage or similar technologies may be used where required for the operation, security, or delivery of the website. Such technologies are not used for behavioural advertising or analytics.

If the website later uses any non-essential cookies or similar technologies for which consent is required by law, they will not be activated without the required consent.

Sharing of Personal Data

I do not sell personal data.

I do not provide personal data to third parties for their own advertising or marketing purposes.

Personal data may be processed or received by service providers where necessary to operate the website or provide related services. These may include:

Hostinger, which provides website hosting and related technical services;
PayPal, which handles donations and payment transactions;
providers used to deliver and store email communications; and
professional, regulatory, governmental, or legal recipients where disclosure is required by law or reasonably necessary to establish, exercise, or defend legal rights.

Service providers are subject to the data-protection obligations that apply to their processing.

Where Personal Data Are Processed

The website is hosted on a server located in Frankfurt, Germany, with backups located in France. Both locations are within the European Economic Area (EEA).

PayPal operates internationally and may process or transfer personal data outside the EEA. PayPal states that it uses legally recognized safeguards for applicable international transfers, including approved Binding Corporate Rules and, where appropriate, other mechanisms permitted under European data-protection law.

If personal data are otherwise transferred outside the EEA, such transfers will be made only where permitted by applicable data-protection law and subject to appropriate safeguards where required.

How Long Personal Data Are Kept

Personal data are kept only for as long as reasonably necessary for the purposes for which they are processed, taking into account applicable legal requirements.

In particular:

technical and security information is retained only for as long as reasonably necessary for website operation, security, troubleshooting, and related purposes;
donation and transaction information may be retained for as long as necessary to administer the donation, address payment or refund issues, and comply with applicable accounting, tax, or other legal obligations; and
email correspondence is retained only for as long as reasonably necessary to deal with the matter concerned and any related legal or administrative requirements.

Personal data may be retained for a longer period where this is necessary to establish, exercise, or defend legal claims or where retention is otherwise required by law.

Data Security

Appropriate technical and organizational measures are used to protect personal data against accidental or unlawful loss, alteration, disclosure, destruction, or unauthorized access.

No method of electronic storage or transmission can be guaranteed to be completely secure, but reasonable measures are taken to protect personal data in accordance with applicable requirements.

Your Rights

Under applicable data-protection law, you may have the right to:

request access to personal data held about you;
request correction of inaccurate or incomplete personal data;
request deletion of personal data;
request restriction of the processing of personal data;
object to processing based on legitimate interests;
receive certain personal data in a portable format where the right to data portability applies; and
withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing that took place before consent was withdrawn.

These rights are subject to the conditions and exceptions provided by applicable law.

To exercise your rights, please contact:

contact@authentic-self-care.com

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe that your personal data have been processed in violation of applicable data-protection law.

Changes to This Privacy Policy

This Privacy Policy may be updated if necessary because of material changes to the website, the way personal data are processed, or applicable legal requirements.

The current version will be published on this page, together with the date of the most recent update.

Authentic Self-Care — English (CA) · Terms of Service · Copyright Notice