Privacy Notice

Nicotine-free Life is the data controller for the personal data collected through this site and the Nicotine-free Life course. That means we decide why and how your personal data is processed.

• Account data — your name, email address, and login credentials, used to create and secure your account and give you access to the course (legal basis: performance of a contract).
• Course progress — lessons you complete and quit-plan days you tick, used to save your progress so you can continue where you left off (legal basis: performance of a contract).
• Reviews you submit — your name, rating, and review text, used to display approved reviews on the site (legal basis: legitimate interests; you can ask us to remove your review at any time).
• Support messages — anything you send us when you contact us, used to answer and help you (legal basis: legitimate interests).
• Usage and device data — basic technical data such as IP address, device and browser type, and how the site is used, used for security, fraud prevention, and improving the service (legal basis: legitimate interests).

Payment details (such as card numbers) are collected and processed by Paddle, our Merchant of Record, not by us.

• Paddle — our Merchant of Record, for the sale of the course, payment processing, tax compliance, and invoicing.
• Service providers — hosting, database, and infrastructure providers that help us operate the site, acting on our instructions.
• Professional advisers — such as legal or accounting advisers, where needed.
• Authorities — where we are required to share data by law.

We do not sell your personal data.

We keep your personal data for as long as your account is active and as needed to provide the service, meet legal obligations (such as tax and accounting rules), and resolve disputes. When data is no longer needed, it is deleted or anonymised.

Depending on where you live, you may have the right to access, correct, or delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. You may also have the right to complain to your local data protection authority. To exercise any of these rights, contact us through the site and we will respond within one month.

We use appropriate technical and organisational measures to protect your data, including encryption in transit and access controls that limit who can see personal data.

We use essential cookies and similar storage to keep you signed in and make the site work. We do not use marketing cookies. You can control cookies through your browser settings; blocking essential cookies may prevent sign-in from working.

We may update this notice from time to time and will post the new version on this page. Questions about this notice or your data? Contact us through the site.