Privacy Policy

Welcome!

This privacy policy explains how we collect, use, store, protect, and share your personal information through our services. Please note, if you are a member of our life transformation platform, this privacy policy should be read alongside LearnWorlds Privacy Policy

Effective: 1st September, 2023

Table of contents:

  • Name and address of the data controller
  • General information on data processing
  • Rights of the data subject
  • Provision of the website and creation of log files
  • Use of cookies
  • Newsletter
  • E-mail contact
  • Contact form
  • Application by email and application form
  • Company presence in social media
  • Hosting
  • Plugins used
  • Disclosure to third parties
  • Children’s online privacy protection act compliance
  • Your consent

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

intogreat Ltd

Suite 6A, 10 Duke Street
Liverpool, L1 5AS, UK
+44(0)151 936 5425
hello@intogreat.net

General information on data processing

  1. Scope of the processing of personal data
    As a matter of principle, we only process personal data of our users insofar as this is necessary for the provision of a functional website as well as our contents and services. The processing of personal data of our users is regularly only carried out with the consent of the user. Exceptions apply in cases where the processing of the data is permitted or ordered by legal regulations.
  2. Legal basis for the processing of personal data
    Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) sentence 1 lit. a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

    When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) p. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures, which are carried out at the request of the data subject.

    Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6 (1) sentence 1 lit. c of the GDPR serves as the legal basis.

    If vital interests of the data subject or another natural person make the processing of personal data necessary, Art. 6 (1) sentence 1 lit. d GDPR serves as the legal basis.

    If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) sentence 1 lit. f GDPR serves as the legal basis for the processing.
  3. Data deletion and storage period

    The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.

Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller, subject to the relevant exceptions subject to the relevant exceptions:

  1. Right of information

You may request confirmation from the controller as to whether personal data concerning you are being processed by the company.

If such processing is taking place, you can request the following information from the controller:

  1. The purposes for which the personal data are processed.
  2. The categories of personal data which are processed.
  3. The recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed.
  4. The planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage duration.
  5. The existence of a right to rectify or erase personal data concerning you, a right to have processing restricted by the controller or a right to object to such processing.
  6. The existence of a right of appeal to a supervisory authority.
  7. Any available information on the origin of the data if the personal data are not collected from the data subject.
  8. The existence of automated decision-making, including profiling, pursuant to Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.


You have the right to request information on whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

2.  Right of rectification

You have a right of rectification and/or completion towards the controller if the personal data processed concerning you is inaccurate or incomplete. The controller shall rectify the data without undue delay.

3. Right to restrict processing


You can request the restriction of the processing of personal data concerning you under the following conditions:

  1. If you contest the accuracy of the personal data concerning, you for a period which enables the controller to verify the accuracy of the personal data.
  2. The processing is unlawful, and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data.
  3. The controller no longer needs the personal data for the purposes of the processing, but you need it for the establishment, exercise or defence of legal claims.
  4. If you have objected to the processing in accordance with Article 21 (1) of the GDPR and it has not yet been determined whether the legitimate reasons of the controller prevail over your reasons.


Where the processing of personal data relating to you has been restricted, that data may be processed, except for storage, only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is removed.

4. Right of deletion

You may request the controller to delete the personal data concerning you without delay and the controller is obliged to delete such data without delay if one of the following reasons applies:

  1. The personal data concerning you is no longer necessary for the purposes for which they were collected or otherwise processed.
  2. You withdraw your consent on which the processing was based pursuant to Art. 6 (1) sentence 1 lit.(a) or Art. 9 (2) lit. a GDPR and there is no other legal basis for the processing.
  3. You object to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
  4. The personal data concerning you have been unlawfully processed.
  5. The erasure of personal data concerning you is necessary for compliance with a legal obligation to which the controller is subject.
  6. The personal data concerning you has been collected in relation to information society services offered in accordance with Article 8(1) of the GDPR.


Where the controller has made the personal data public and is obliged pursuant to Article 17 paragraph 1 GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

5. Right to be informed

If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed of these recipients by the data controller.

6. Right of data portability


You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data has been provided, provided that

  1. The processing is based on consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR or Art. 9 (2) lit. a GDPR or on a contract pursuant to Art. 6 (1) sentence 1 lit. b GDPR; and
  2. The processing is carried out with the assistance of automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transferred directly from one controller to another controller, insofar as this is technically feasible. This must not affect the freedoms and rights of other persons.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right of objection

You have the right to object at any time, based on reasons arising from your particular situation to the processing of personal data relating to you which is carried out on the basis of Art. 6 (1) sentence 1 lit. e or f of the GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data relating to you unless it can demonstrate compelling legitimate reasons for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising, or defending legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in the context of the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

8. Right to revoke the declaration of consent under data protection law


You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation.

9. Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:

  1. Is necessary for the conclusion or performance of a contract between you and the responsible person.
  2. Is permitted by legislation of the country to which the controller is subject, and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests.
  3. Is done with your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Article 9 (1) of the GDPR, unless Article 9 (2)(a) or (b) of the GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.


Provision of the website and creation of log files

Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:

  1. Information about the browser type and the version used.
  2. The operating system of the user.
  3. The Internet service provider of the user.
  4. The IP address of the user.
  5. Date and time of access.
  6. Websites from which the user’s system accesses our website.
  7. Websites that are accessed by the user’s system via our website.


This data is stored in the log files of our system. This data is not stored together with other personal data of the user.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 (1) sentence 1 lit. f GDPR. The legal basis for the temporary storage of the data and the log files is Art. 6 (1) sentence 1 lit. f GDPR.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

If the data is stored in log files, this shall be the case after seven days at the latest. Storage beyond this, e.g., for fraud prevention, is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.

The collection of data for the provision of the website and the storage of the data in log files is necessary for the operation of the website. Consequently, there is no possibility for the user to object.

Use of cookies

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user calls up a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

  1. Accessibility settings.
  2. Frequency of page views.
  3. Use of website functions.

The user data collected in this way is pseudonymized by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the user.

When calling up our website, the user is informed about the use of cookies for analysis and other than technically necessary purposes and his or her consent to the use of such cookies and the processing of personal data used in this context is obtained. In this context, a reference to this data protection declaration is also made.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) sentence 1 lit. f GDPR.

Cookies are stored on the user’s computer and transmitted to our site by the user. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

If you use a Safari browser from version 12.1, cookies are automatically deleted after seven days. This also applies to opt-out cookies, which are set to prevent tracking measures.

Newsletter

On our website, you have the option of subscribing to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us.

  1. Email address.
  2. Name.
  3. First name.
  4. IP address of the accessing computer.
  5. Date and time of registration.


No data will be passed on to third parties in connection with the processing of data for the dispatch of newsletters. The data is used exclusively for sending the newsletter.

The collection of the user’s email address serves to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.


The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 (1) sentence 1 lit. a GDPR if the user has given his or her consent.

The data processed in connection with the so-called double opt-in procedure (IP address, time stamp) is based on Art. 6 (1) lit. f GDPR. In cases of doubt, being able to prove that you have consented to receive our newsletter is considered a legitimate interest.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user’s email address is therefore stored if the subscription to the newsletter is active. The other personal data collected during the registration process is usually deleted after a period of seven days.

E-mail contact

On our website, it is possible to contact us via the email address provided. In this case, the user’s personal data transmitted with the email will be stored. The data is used exclusively for processing the conversation.

In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data. The legal basis for the processing of the data is Art. 6 (1) lit. a GDPR if the user has given his or her consent.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued.

The data will be used exclusively for the processing of the conversation and will be deleted afterwards.

Contact form

Our website contains a contact form that can be used for electronic contact. If a user uses this option, the data entered in the input mask is transmitted to us and stored.

At the time the message is sent, the following data is stored:

  1. Email address.
  2. Name.
  3. First name.
  4. IP address of the calling computer.
  5. Date and time of contact.
  6. Reason for contacting us.

For the processing of the data, your consent is obtained during the sending process and reference is made to this data protection declaration. Alternatively, it is possible to contact us via the email address provided. In this case, the user’s personal data transmitted with the email will be stored. The data is used exclusively for processing the conversation.

The processing of the personal data from the input mask serves us solely to process the contact. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for the processing of the data is Art. 6 (1) sentence 1 lit. a GDPR if the user has given his or her consent. If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) sentence 1 lit. b GDPR.


The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified. The additional personal data collected during the sending process is deleted after a period of seven days at the latest.

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts the controller by email, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued. The data will be used exclusively for the processing of the conversation and will be deleted afterwards.

Application by email and application form

Our website contains application forms that can be used for electronic applications in respect of applying to our hardship fund and applying to join the coaching faculty. If an applicant uses this option, the data entered in the input mask will be transmitted to us and stored. These data are:

  1. Title.
  2. First name.
  3. Surname.
  4. Telephone / mobile number.
  5. Email address.
  6. Written application for the hardship fund.
  7. Written application to join the coaching faculty which may include attaching a copy of their curriculum vitae.
  8. Location.


Alternatively, you can also send us your application by email. In this case, we will collect your email address and the data you provide in the email. After sending your application, we will send you an email confirming receipt of your application documents.

Your data will not be passed on to third parties. The data will only be used for processing your application.

The processing of personal data from an application form is solely for the purpose of processing your application. In the case of contact by email, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the submission process serve to prevent misuse of an application form and to ensure the security of our information technology systems.

The legal basis for the processing of your data is the initiation of a contract at the request of the data subject, Art. 6 (1) sentence 1 lit. b Alt. 1 GDPR.

After completion of the application process, the data will be stored for up to six months. Your data will be deleted after six months at the latest. In the event of a legal obligation, the data will be stored within the scope of the applicable provisions.

Assessment

On our website, you have the option of completing a free assessment. When completing the assessment, the data from the input mask is transmitted to us.

  1. Email address.
  2. First Name.
  3. Last name.
  4. IP address of the accessing computer.
  5. Date and time of completion


The data is collected by a third party vendor and accessed by us, so we can process and analyse the data and provide the user with a customised report. We respect your privacy and will handle your responses with the utmost confidentiality. Your individual results will not be disclosed or shared with any third party. Your responses will be anonymized and aggregated with other participants' responses to ensure your privacy. The aggregated data will be used to draw conclusions, identify trends, and generate insights which will be used in our business, to address the global mental health and wellbeing crisis.


Your participation in the assessment is entirely voluntary. You have the right to withdraw from the assessment at any time without penalty or consequences. We have implemented appropriate security measures to protect your data from unauthorized access, alteration, or disclosure. However, please be aware that no data transmission over the internet or electronic storage method is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

For the processing of the data, your consent is obtained during the completion of the assessment and reference is made to this data protection declaration. The legal basis for the processing of the data is Art. 6 (1) lit. a GDPR if the user has given his or her consent. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts the controller by email, he or she can object to the storage of his or her personal data at any time. In such a case, the data will be used exclusively for the processing of the conversation and will be deleted afterwards.

Company presence in social media

Instagram: Instagram, Part of Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2 Ireland.

On our company page, we provide information and offer Instagram users the opportunity to communicate. If you carry out an action on our Instagram company page (e.g., comments, posts, likes, etc.), you may make personal data (e.g. clear name or photo of your user profile) public.

However, since we generally or to a large extent have no influence on the processing of your personal data by Instagram, we cannot provide any binding information on the purpose and scope of the processing of your data.

Our presence in social media is used for communication and information exchange with (potential) customers. We use this for providing information about services, company news and customer contact.

Each user is free to publish personal data through activities. The legal basis for data processing is Art. 6 (1) sentence 1 lit. a GDPR. The data generated by the company through social media networks is not stored in our own systems.

You can find more information on the processing of your personal data by Instagram and the corresponding objection options here: Instagram: https://help.instagram.com/519522125107875

YouTube:

YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, United States.

On our company page, we provide information and offer YouTube users the opportunity to communicate. If you carry out an action on our YouTube company site (e.g., comments, posts, likes, etc.), you may make personal data (e.g. your real name or a photo of your user profile) public.

However, as we generally or to a large extent have no influence on the processing of your personal data by YouTube, we cannot provide any binding information on the purpose and scope of the processing of your data.

Our company's presence in social networks is used for communication and information exchange with (potential) customers. We use the company presence for providing information about services, distributing educational content, customer contact and broadcasting company news.  Each user is free to publish personal data through activities.

The legal basis for data processing is Art. 6 (1) sentence 1 lit. a GDPR. The data generated by YouTube is not stored in our own systems. You can find more information about the processing of your personal data by YouTube and the corresponding objection options here: YouTube: https://policies.google.com/privacy?gl=DE&hl=de

LinkedIn:

1000 W Maude Ave Sunnyvale (HQ), California, United States.

On our company page, we provide information and offer LinkedIn users the opportunity to communicate. If you carry out an action on our LinkedIn company site (e.g., comments, posts, likes, etc.), you may make personal data (e.g. your real name or a photo of your user profile) public.

However, as we generally or to a large extent have no influence on the processing of your personal data by LinkedIn, we cannot provide any binding information on the purpose and scope of the processing of your data.

Our company's presence in social and business networks is used for communication and information exchange with (potential) customers. We use the company presence for providing information about services, job vacancies, distributing educational content, customer contact and broadcasting company news.  Each user is free to publish personal data through activities.

The legal basis for data processing is Art. 6 (1) sentence 1 lit. a GDPR. The data generated by LinkedIn is not stored in our own systems. You can find more information about the processing of your personal data by LinkedIn and the corresponding objection options here: LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv

Facebook:

Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2 Ireland.

On our company page, we provide information and offer Facebook users the opportunity to communicate. If you carry out an action on our Facebook company page (e.g., comments, posts, likes, etc.), you may make personal data (e.g. clear name or photo of your user profile) public.

However, since we generally or to a large extent have no influence on the processing of your personal data by Facebook, we cannot provide any binding information on the purpose and scope of the processing of your data.

Our presence in social media is used for communication and information exchange with (potential) customers. We use this for providing information about services, company news and customer contact.

Each user is free to publish personal data through activities. The legal basis for data processing is Art. 6 (1) sentence 1 lit. a GDPR. The data generated by the company through social media networks is not stored in our own systems.

You can find more information on the processing of your personal data by Facebook and the corresponding objection options here: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0

Hosting

The website is hosted on servers provided by our service provider. Our service provider is: Webflow Rank, 398 11th Street, San Francisco, United States.

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is:

  • Browser type and browser version.
  • Operating system used.
  • Referrer URL.
  • Host name of the accessing computer.
  • Date and time of the server request.
  • IP address.

This data is not merged with other data sources. The collection of this data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected.

The location of the server of the website is geographically in Ireland.

LearnWorlds

We use LearnWorlds (CY) Ltd, Gladstonos 120, Foloune Building, 2nd Floor, B1, Limassol, 3032, Cyprus. to host our life transformation platform. You can read their privacy policy. for more details.

Their servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is:

  • Browser type and browser version.
  • Operating system used.
  • Referrer URL.
  • Host name of the accessing computer.
  • Date and time of the server request.
  • IP address.

This data is not merged with other data sources. The collection of this data is based on Art. 6 (1) lit. f GDPR. LearnWorlds has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected.

Plug-ins used

We use Zapier, Hubspot, Google Analytics, Microsoft, Stripe and other applications as plug-ins on our website, which are a suite of web analysis services that examine, among other things, the origin of visitors, the time they spend on individual pages and the use of search engines, thus allowing better monitoring of the success of advertising campaigns.

We also use an integrated software solution to cover various aspects of our online marketing. These include, among others: email marketing (newsletters and automated mailings, e.g., to provide downloads), social media publishing and reporting, reporting (in particular traffic sources, accesses, etc.), contact management (in particular user segmentation & CRM), landing pages and contact forms.


These applications may place cookies on your computer. This allows personal data to be stored and analyzed, the user’s activity (especially which pages have been visited and which elements have been clicked on), device and browser information (especially the IP address and operating system). The information generated by the cookie about your use of this website will be transmitted to and stored on servers in the United Kingdom and Europe.

The purpose of the processing of personal data is to specifically address a target group that has already expressed an initial interest by visiting the website. The legal basis for the processing of users’ personal data is generally the user’s consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR.

Your personal information will be retained for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law. You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation.

You can prevent the collection as well as the processing of your personal data by these applications by preventing third-party cookies from being stored on your computer, by using the “Do Not Track” function of a supporting browser, by deactivating the execution of script code in your browser.

We use Stripe Inc. 354 Oyster Point Blvd South San Francisco, CA 94080 United States.


Stripe is our third-party payment processor and assists us in processing your payment information securely.  You can obtain further information on the processing of your personal data by Stripe Inc. here: https://stripe.com/gb/privacy


The legal basis for the processing of users’ personal data is generally the user’s consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR. Your personal information will be retained for as long as is necessary to fulfill the purposes described in this privacy policy or as required by law. You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation.

Disclosure to third parties

We do not sell, trade, or otherwise transfer to outside parties your personal data. This does not include trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our website policies, or protect ours or others’ rights. However, non-personally identifiable visitor information may be provided to other parties for marketing, advertising, or other uses.

Children’s online privacy protection act compliance

Our website, products and services are all directed to people who are at least 13 years or older. We do not knowingly collect any personal information from children under the age of 13. If you are under the age of 13, please do not submit any personal information through our website. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this policy by instructing their children never to provide personal information through our website without their permission. If you have reason to believe that a child under the age of 13 has provided personal information to us through our website, please contact us on support@intogreat.net

You must also be at least 16 years of age to consent to the processing of your personal information in your country (in some countries we may allow your parent or guardian to do so on your behalf).

Your consent

By using our website, you consent to our website privacy policy.