Privacy Policy

• Account details: the name or display name, email, password hash, and optional profile details you provide, plus account preferences and security records. New registration no longer asks for gender. An older account record may still contain a gender selection previously supplied; you may ask us to correct or delete that field.
• Service and inquiry details: messages, uploaded files, topic choices, timing or location information you choose to submit, reports, and support correspondence. Earlier inquiry or assessment records may include answers previously submitted to us.
• Orders: package, amount, payment method, status and payment references. Payment providers handle payment information needed for the method you choose.
• Operational records: IP address, browser/device information, the browser-reported timezone recorded with a conversation, timestamps, and necessary security or server logs used to operate and protect the site. The current application does not create new pageview, referral-parameter or campaign-parameter analytics records. Legacy first-party pageview or attribution records may remain only until the published 90-day cleanup runs.
• Email preferences: newsletter signup, confirmation and unsubscribe records.

Relationship discussions can reveal sensitive information. Do not submit special-category information about yourself or another person, including health information, sex-life or sexual-orientation information, or religious or philosophical beliefs. Also omit unnecessary names and identifying details, intimate media, medical records, full payment-card details, and information you do not have a lawful right to share. Use a general, non-identifying description instead.

Before starting a conversation, you must leave the exclusion acknowledgment unchecked until you have read it, then actively confirm that your submission follows this rule. PremiumPairing does not offer an option to consent to special-category processing through the conversation form. Authorized staff can read permitted messages and files to handle the request. Sending a message or using the site is not a blanket waiver of privacy rights or permission for unrelated uses.

Where applicable data-protection law requires a lawful basis, we distinguish these purposes:

• Providing the service you request — contract: account administration, order and payment processing, requested consultations, related service notifications, refunds and support necessary to perform our agreement with you or take steps you request before a purchase.
• Security and dispute handling — legitimate interests: keeping the service secure, preventing fraud and abuse, investigating technical errors, maintaining evidence of transactions and handling or defending claims. These interests must be considered alongside your rights; you may object to processing based on legitimate interests.
• Records required by law — legal obligation: keeping or disclosing particular records where applicable accounting, tax or other law requires it. This does not mean every record must be kept indefinitely.
• Optional email updates — consent: sending newsletters after you complete the separate email confirmation. You can withdraw this consent using the unsubscribe link without ending a paid package. Necessary order and account messages are separate.
• Optional internal service-use research — consent: if you separately opt in, using only the calendar month in which a future conversation starts as the service-use value. This purpose and its exclusions are described below. Research is off by default and is separate from service delivery.
• Consent-choice evidence — accountability, legal obligations and legitimate interests: keeping a limited record of an optional research grant, withdrawal or expiry so we can demonstrate and honor the choice, meet an applicable accountability duty, and handle proportionate legal claims. This narrow audit record is kept separately from the research metric and is not used to continue research after consent is withdrawn.

A contract with you does not automatically permit processing special-category information about you or another person. PremiumPairing therefore requires you to exclude that information from every new conversation and use a general, non-identifying description. The form does not provide an Article 9 or equivalent explicit-consent option. If you cannot explain the request without special-category information, do not submit that information through the service.

Authorized PremiumPairing staff and providers needed for hosting, email delivery, payment processing and technical operation may process the information relevant to their role. We may also disclose information when required by applicable law or to handle a lawful claim.

For this policy version, the current provider map is:

• Core website, account, conversation and research-metric hosting: Hetzner Online GmbH on a server in Helsinki, Finland. Hetzner states that data stored at its Helsinki location remains within the EU. Hetzner data-protection information.
• Service email: Namecheap Private Email. Namecheap states that customer data may be processed in the United States and that its data-processing terms incorporate the EU Standard Contractual Clauses and UK transfer clauses where they apply. Namecheap data-processing terms.
• Payments, only when you choose the available method: the current Cash App/Lightning route uses infrastructure provided by Voltage Incorporated. Voltage states that its servers are in the United States, that information from Europe is transferred to the United States, and that it uses European Commission Standard Contractual Clauses for relevant EEA transfers. Voltage privacy information. Cash App also applies its own notice when you choose to open or complete a payment through Cash App.

Staff draft review: staff can use TypeSafe AI’s Jev model to check draft wording and whether claims are supported by a supplied excerpt. Staff must remove names, contact details, identifying details and sensitive personal information before submitting text. The integration sends only the draft and context staff choose to enter; it does not automatically send account records, conversations, attachments or payment details. Staff review the results and decide what to write and send. Our Jev usage records contain request metadata, such as the purpose, model, token counts, status and response time, rather than the submitted text. TypeSafe’s own processing terms are available in its data and privacy documentation.

A payment provider receives the transaction, account-contact and technical information needed for the selected payment route; it is not sent consultation messages or attachments for payment processing. Service emails may contain an inquiry subject or service content needed for that email. We do not sell personal information or send private submissions to advertising platforms.

Apple Pay and Google Pay through GGusOnePay and the CryptoCurrencyAPI.net route are disabled because PremiumPairing has not verified the endpoint operator, processing and access countries, downstream providers, contractual safeguards or payment-security status for those routes. They will not be offered unless those facts are verified and this notice is updated first. Historic order records may show that a customer previously chose one of these routes. When active, the selected endpoint received the transaction, account-contact and technical information needed to attempt or confirm that payment; it did not receive consultation messages or attachments for payment processing. PremiumPairing does not represent the providers' undisclosed storage, access or retention practices as verified. Authorized remote staff access is not represented as limited to the EU, UK or your country. You may ask for the current staff-access countries before uploading information. Accepting this notice does not itself provide consent for a restricted international transfer.

The website uses HTTPS for information in transit, password hashing, account authentication and access controls. Messages are not end-to-end encrypted: authorized staff can access them. No online service can promise absolute security.

If an incident affects personal information, we will assess it and notify affected users or regulators within the timeframes required by applicable law.

The current free reflection quiz runs in your browser. Its answers are not sent to or stored on the server. This is separate from messages, files and other information you intentionally submit through account or contact forms.

Third-party advertising and analytics tags are disabled, including Meta Pixel and Google Tag Manager. The current application also does not create new first-party pageview, UTM, referral or campaign-attribution analytics records. Legacy first-party records may remain only until the published 90-day cleanup runs. Necessary security and server logs are distinct from analytics and advertising tracking. A saved cookie preference does not enable disabled tags.

Cookies and browser storage support sign-in, carts, security, preferences and optional site features. External resources you choose to use, such as a payment provider, may receive connection information. See the Cookie Policy.

Research is off by default. If you actively opt in through Privacy & Research, we record one pseudonymous metric when you start a new conversation after that choice. Its service-use value is the calendar month in which the conversation started. We use that coarse value for internal commercial research to understand service use and improve how the service operates.

The research metric does not contain discussion or message text, intake answers, conversation topics or subjects, attachments, reports, names or contact details, profile or account details, package or payment information, the precise date or time when the conversation started, location or timezone data, IP address, device or advertising data, sensitive-category information, or information about another person. Alongside the random code and month value, the records keep a fixed metric-version label and operational timestamps showing when the pseudonymous metric was copied and when it must expire. Existing and pre-opt-in conversations are never made eligible later.

A random research code replaces account and conversation identifiers in the research-facing record. A restricted internal link is kept only so we can enforce the prospective cutoff and delete the metric after withdrawal or account deletion. Access is limited to authorized PremiumPairing staff working on this internal research. A hosting provider may store the records only as a service provider acting on our instructions.

The metric is not sold, shared with external researchers, used for advertising, published as a customer quotation or example, used to train AI or other models, or used for automated decisions. It does not evaluate or validate behavioural extraction or an individual consultation.

The metric becomes unavailable for research when you withdraw or, otherwise, at the 12-month expiry after you opt in. Withdrawal and account deletion synchronously delete linked active research metrics. Expired metrics are physically deleted by the next scheduled daily cleanup. If cleanup is interrupted, expired metrics remain excluded from research and deletion is retried on the next run. Residual copies may remain in restricted disaster-recovery or system-maintenance backups until those backups are rotated or retired. Backup copies are not used for research, and withdrawal or expiry deletions must be reapplied before restored data can be used. The consent choice, exact notice version and time of the choice may be retained in active records for up to three years to document the choice. Withdrawal stops future collection; it does not remove ordinary service records handled separately for the purposes described in this notice.

Declining or withdrawing does not affect your account, package, consultations, support, refund rights or other service rights. You can change this choice at any time in Privacy & Research.

The 30-day package coverage period is not a data-deletion deadline. Account and consultation history may remain available after coverage ends. Retention depends on the type of record:

• Account details: retained for account access and administration, subject to a deletion request and any necessary security or legal records.
• Consultation messages, reports and uploaded files: retained for delivery of requested work, access to existing conversations and handling related support or disputes. Relevant factors include whether work is outstanding, whether a refund or dispute remains open, and whether a specific legal obligation requires a record to remain.
• Orders and payment references: retained for the accounting, refund, payment-dispute and legal requirements applicable to the transaction. Account deletion does not automatically remove these records.
• Email preferences: confirmation and unsubscribe records may be retained to document your choices and prevent unwanted email, even after marketing emails stop.
• Optional research: conversation-month metrics become unavailable for research upon withdrawal or at the 12-month expiry. Withdrawal deletes linked active metrics synchronously; expired metrics are physically deleted by the next scheduled daily cleanup and remain excluded if deletion must be retried. Consent-choice audit records may be retained in active records for up to three years. Restricted backup copies follow the backup limitation explained above.

Routine cleanup is configured to remove email logs, login history, legacy page views and attribution records, payment-webhook logs and completed email-queue entries after 90 days, and administrative logs after 180 days. The current application does not add new pageview or UTM attribution analytics records. Cleanup is also configured to remove identifying IP/browser data from cookie-consent records after 180 days and remove used or expired password-reset and email-code records after seven days. These are cleanup thresholds, not the lifetime of every record held by the service.

Account deletion disables access and removes or replaces specified profile and submission fields; it is not an immediate erasure of every related record. Some advisor replies, uploaded files, transaction records or other linked information may remain and require a separate deletion review. Contact us to request that review, including for information about other people. Backup copies, where retained, may remain until the relevant backup is removed. You can request information about the retention and deletion of the copies relevant to your account.

You can review available profile controls and request an account-data export or account deletion from your dashboard. The dashboard export contains selected account records; contact us if you need information or files not included in it. You can also contact us to request access, correction, deletion, a portable copy, restriction of use or an objection to processing. The rights and exceptions that apply depend on the law covering the request.

Use the unsubscribe link for optional email updates. Use Privacy & Research to withdraw optional research consent and delete linked active research metrics. Withdrawing consent does not undo processing already lawfully completed, and necessary account or legal records may still need to be handled for a different valid purpose.

We may ask for enough information to verify a request without exposing someone else's data. We will respond within applicable legal time limits and explain any valid exception or extension. You may complain to the privacy regulator or court available to you. We will not penalize you merely for exercising a privacy right.

The service is for adults aged 18 or older. Do not create an account for a child or submit intimate media or unnecessary identifying information about a child. Contact us if you believe such information has been submitted.

We may update this notice when data handling changes. The date above identifies the latest version. A notice update does not itself create consent for a new purpose. Questions can be sent through our contact page or to contact@premiumpairing.com.