Privacy Policy

Effective Date: September 29, 2026

This Privacy Policy describes how Gafarova Tanzilia ("we," "us," or "our"), a Hungarian sole proprietor (egyéni vállalkozó), collects, uses, and protects your information when you use The Naturals Method website at thenaturalsmethod.com and the products offered through it (the "Service").

1. Who We Are

The Service is operated by Gafarova Tanzilia, a Hungarian sole proprietor. Registered seat: Szondi utca 2/A, 1201 Budapest, Hungary. Tax number (adószám): 92105753-1-43. EU VAT number: HU92105753. Registry number: 62389640. VAT status: alanyi adómentes (VAT-exempt). We are the data controller for the personal data described in this Policy.

2. Information We Collect

The Service is a simple digital-product checkout. We collect only what we need to fulfil your purchase and to communicate with you.

Order Information: When you purchase, we collect your name, email address, and billing address. Payment card details are collected and processed directly by our payment processor (Stripe); we never receive or store your full card number.

Email Entered at Checkout: When you enter your email and confirm you are 16 or older to open the checkout, we save that email and the time in MailerLite, even if you do not finish the purchase, and may email you about the order you left. Every such email has an unsubscribe link.

Chosen Skill or Discipline: During checkout you may voluntarily tell us the skill or discipline you are working on. This is optional and is used only to tailor the workshop content and our messages to you.

3. How We Use Your Information

• To process your payment and deliver the digital products you purchased.
• To create and give you access to your account and content.
• To send you transactional messages about your order (receipts, access links, refunds, and important account or policy updates).
• To send you marketing email about The Naturals Method where you have consented or where permitted by law, from which you can unsubscribe at any time.
• To respond to your support requests.
• To comply with our legal, tax, and accounting obligations.

4. What We Do Not Do

• We do not sell your personal information to third parties.
• We do not use your data for third-party advertising beyond measuring our own ad campaigns, and only with your consent.
• We do not use your data to train AI models.
• We collect nothing beyond what is listed in this Policy.

5. Lawful Bases for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data on the following lawful bases:

• Performance of a contract: to process your order, deliver your products, and give you access to your content.
• Legal obligation: to keep invoicing, tax, and consumer-protection records as required by Hungarian and EU law.
• Consent: for marketing email, for analytics and advertising cookies and pixels, and for the optional skill or discipline you choose to share. You may withdraw consent at any time.
• Legitimate interests: to secure the Service, prevent fraud and abuse, and respond to your support requests, balanced against your rights.

6. Data Storage and Security

Your data is stored on secure servers. We use industry-standard security measures to protect your information. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Third-Party Services

We use the following third-party processors, each with its own privacy policy. Each receives only the data needed to perform its function.

• Stripe: payment processing. Stripe receives your payment and billing information directly; we do not store full card details. Located in the United States.
• MailerLite: marketing email sequences. Located in the European Union. Unsubscribing there also stops marketing email from The Art of Practice app.
• Resend: transactional email (access links, call confirmations, the app plan’s terms and reminders). Located in the United States.
• Google (Calendar): when you book a call, the event holds your name, email, phone number if you give one, and your answers to the booking questions. Located in the United States.
• Replit: hosting of this website and its server. Located in the United States.
• Wistia, Bunny.net and YouTube: the videos on these pages. Playing or loading one shares your IP address and browser details with that service. United States, European Union and United States.
• Lulu: printing and shipping a paperback you order. Receives your name and shipping address. Located in the United States.
• The Art of Practice app (theartofpractice.app, operated by us): what you buy here is handed to your app account, with your email, name, address, the skills you chose, what you paid and that you confirmed you are 16 or older. The emails entered at checkout, with the time and any name MailerLite holds, are listed in our own admin dashboard there. When a page checks whether an offer is open for you, the app also receives your IP address, to limit repeated checks.
• Google (Google Analytics 4): website analytics, loaded only with your consent. Google Ireland Ltd.; data may be processed in the United States under Standard Contractual Clauses.
• Meta (Meta Pixel and Conversions API): advertising measurement, loaded or sent only with your consent. Any email sent to the Conversions API is hashed (SHA-256) first. Meta Platforms Ireland Ltd.; data may be processed in the United States under Standard Contractual Clauses.
• OpenAI (ChatGPT Ads Measurement Pixel and Conversions API): advertising measurement, loaded or sent only with your consent. Any email sent is hashed (SHA-256) first. OpenAI; data may be processed in the United States.

Where personal data is transferred outside the European Economic Area (for example, to a provider located in the United States), the transfer is protected by the European Commission’s Standard Contractual Clauses and other appropriate safeguards.

8. Cookies

The Service uses only the cookies and similar technologies needed to operate:

• Essential Cookies: Required for the Service to function, including cookies that keep your checkout session and login working and that provide security. These cannot be disabled.
• Functional Cookies: Remember basic preferences so the Service works smoothly for you.

With your consent, we also use analytics and advertising cookies (Google Analytics and the Meta Pixel) to measure site usage and ad performance. These are not loaded unless you accept them in our cookie banner. See our Cookie Policy for the full list, purposes, and durations.

9. Your Rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete information.
• Erase your personal data ("right to be forgotten"), subject to records we must keep by law.
• Restrict or object to our processing of your data.
• Data portability: receive a copy of the data you provided in a structured, commonly used, machine-readable format.
• Withdraw consent at any time, where processing is based on consent, without affecting processing already carried out.

To exercise any of these rights, contact us at support@theartofpractice.com. We will respond within the period required by law (generally within one month). You also have the right to lodge a complaint with a supervisory authority. In Hungary, this is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu).

10. Data Retention

We retain your order and account data for as long as your account is active and you have access to purchased content. When you ask us to erase your data, your personal data is deleted, except that purchase and invoicing records are kept in the form required by tax and consumer-protection law for the statutory retention period. Marketing data is retained until you unsubscribe or withdraw consent.

11. Children

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. Every form and checkout that takes your name, email, phone or card asks you to confirm you are 16 or older, and without that confirmation nothing is sent to our providers or stored. Orders record when you confirmed it.

12. International Users and Transfers

If you are accessing the Service from outside Hungary, your data may be transferred to and processed in countries with different data protection laws, including the United States (via Stripe). Where personal data leaves the European Economic Area, it is protected by Standard Contractual Clauses and other appropriate safeguards as described in Section 7.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service at least 30 days before they take effect.

14. Contact

For privacy-related questions or requests, contact us at:
support@theartofpractice.com