Privacy Policy
How we collect, use, and protect your data. GDPR and CCPA compliant.
Effective date: April 11, 2026
Last updated: April 11, 2026
Health and Beyond ("we," "us," "our") respects your privacy. This policy explains what information we collect when you visit healthandbeyond.org, how we use it, how we protect it, and the rights you have over your personal data. It applies to all visitors worldwide and is written to comply with the General Data Protection Regulation (GDPR) for EU/UK readers and the California Consumer Privacy Act (CCPA) for California readers.
If you have any questions about this policy, please contact us.
1. Information We Collect
Information you give us directly
- Email address when you subscribe to our newsletter or download a free resource.
- Name (optional) when you complete certain forms.
- Comment content if you leave a comment on an article.
- Message content when you contact us through our contact form.
Information we collect automatically
- Device and browser information (type, version, operating system, screen size)
- IP address and approximate location (country / region)
- Pages visited, time on page, scroll depth, and referring URL
- Cookies and similar technologies (see Section 4)
Information from third parties
- Google Analytics 4 — site usage analytics
- Google Search Console — search query data
- Email service provider — subscriber management
- Advertising partners (Google AdSense, Mediavine, Raptive) — ad measurement and personalization
- Affiliate networks — to track whether a purchase originated from our site
2. How We Use Your Information
- Deliver our content and services — including sending newsletters and requested downloads
- Respond to your messages sent through our contact form
- Improve our site — understanding which content is valuable
- Show relevant ads through our advertising partners
- Track affiliate conversions so that partners can credit us accurately
- Prevent abuse — detecting spam, fraud, and malicious activity
- Comply with the law — including tax, accounting, and legal obligations
We do not sell your personal data to third parties.
3. Legal Basis for Processing (GDPR)
If you are in the EU or UK, we process your personal data on the following legal bases:
- Consent — for marketing emails, optional cookies, and certain analytics. You may withdraw consent at any time.
- Legitimate interests — for site security, fraud prevention, and understanding how our content is used.
- Contract — to fulfill services you request.
- Legal obligation — to comply with applicable laws.
4. Cookies and Tracking Technologies
We use cookies and similar technologies for several purposes:
| Category | Purpose | Examples |
|---|---|---|
| Strictly necessary | Core site functionality | Session cookies, security tokens |
| Analytics | Understanding how the site is used | Google Analytics 4 |
| Advertising | Delivering and measuring ads | Google AdSense, Mediavine partners |
| Affiliate | Tracking purchases for commission | Amazon Associates, ShareASale |
You can manage your cookie choices through our cookie consent banner or through your browser settings. Disabling cookies may affect your experience of the site.
5. Who We Share Your Information With
We share limited data with trusted service providers who help us run the site, including:
- Hosting provider — Firebase Hosting by Google
- Analytics — Google Analytics 4 and Google Search Console
- Email platform — ConvertKit or similar
- Advertising network — Google AdSense (and Mediavine/Raptive as we scale)
- Affiliate networks — Amazon Associates, ShareASale, Impact, and similar
We do not sell your personal information.
6. Data Retention
- Email subscribers — until you unsubscribe, then for up to 30 days in our unsubscribe log
- Contact form messages — for up to 2 years after our last correspondence
- Analytics data — generally retained for 14 months
- Logs — typically 30–90 days
7. Your Rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Delete your personal information ("right to be forgotten")
- Object to certain processing
- Restrict processing in some circumstances
- Portability — receive a copy of your data in a portable format
- Withdraw consent at any time
- Opt out of the sale/sharing of personal information (California residents)
To exercise any of these rights, contact us.
8. Children's Privacy
Health and Beyond is intended for adults. We do not knowingly collect information from anyone under the age of 16.
9. International Data Transfers
Health and Beyond is hosted on Firebase Hosting (Google Cloud). If you are visiting from outside the US, your information may be transferred to, stored, and processed in the US. We rely on standard contractual clauses and equivalent legal mechanisms where required.
10. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be announced on our homepage or via email.
11. Contact Us
If you have any questions about this policy, contact us or email kglabsystems@gmail.com.