Your data at Strong Confident Living

Last updated: 2026-06-02

The short version

We collect the minimum we need to give you access to courses you paid for, send you the receipts and account emails you’d expect, and improve the product over time. We do not sell or share your personal information for cross-context behavioral advertising. You can ask for a copy, correction, or deletion at any time.

Who we are

“Strong Confident Living” (“we”, “us”, “our”) refers to Strong Confident Living LLC, a New Jersey limited liability company with its registered office at 56 Oak Trail Rd, Hillsdale, NJ 07642, United States. We are the “controller” (GDPR) and “business” (CCPA/CPRA) of the personal data described below. Contact us at support@strongconfidentliving.com.

What we collect

Account info — your name, email address, password (hashed), and a profile photo if you upload one.
Sign-in identifiers — if you connect Google, we store the linked Google account email; we never see your Google password.
Purchase records — Stripe processes payments; we store the resulting charge ID, amount, currency, country of purchase, and receipt URL. We do not store full card numbers or other cardholder data on our servers.
Course activity— which lessons you’ve watched, marked complete, or practiced. Used to render “continue where you left off” and progress bars.
Email engagement — our transactional email provider, Postmark, records when you open or click links in the emails we send you. We use these events to confirm delivery, debug deliverability issues (e.g. messages caught by a spam filter), and decide whether to retry sending. We do not use this data to build advertising profiles.
Support correspondence — when you email us, we keep the thread so we can respond and so we have a record of what was promised.

How we use it

To deliver the course you bought (legal basis under GDPR: performance of a contract).
To send transactional emails — welcome, receipt, password reset, expiration reminders, support replies (legal basis: performance of a contract).
To send marketing emails about new courses only if you explicitly opted in at signup or in your account settings (legal basis: consent). You can unsubscribe from any email or withdraw consent at any time.
To prevent fraud, debug issues, and improve the product (legal basis: our legitimate interest in operating a reliable service, balanced against your rights).
To meet tax, accounting, and other legal obligations (legal basis: legal obligation).

Who we share it with

We share data only with the service providers (“processors”) that make the product run, under contracts that limit their use of your data to providing the service to us:

Stripe — payment processing. Stripe acts as the merchant of record and as an independent controller for its own anti-fraud and regulatory purposes. See Stripe’s privacy policy.
Supabase — database hosting (account info, purchase records, course activity). U.S. region.
Cloudflare R2 — video hosting and delivery.
Postmark — transactional email delivery and engagement tracking (opens and clicks).
Vercel — application hosting. U.S. region.
HubSpot— customer relationship management and marketing email. We sync your name, email, and which courses you’ve enrolled in or joined the waitlist for, so we can send you relevant updates. We do not send marketing email unless you’ve opted in, and you can unsubscribe at any time. U.S. region.

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. We may disclose data if required by law (e.g. a valid subpoena) or to protect the rights, property, or safety of our users or ourselves.

Where it lives

Our database and application infrastructure run in the United States. If you are in the EU, UK, Canada, or another region with cross-border transfer rules, your information will be transferred to and processed in the U.S. for the purposes described above. Where required, we rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum) with our U.S. processors as the lawful transfer mechanism.

How long we keep it

We keep data only as long as we need it for the purpose it was collected, plus any period required by law. Indicative retention periods:

Account data (name, email, password, sign-in identifiers) — until you ask us to delete your account, after which we delete or anonymize within 30 days.
Purchase and tax records (charge ID, amount, country, receipt URL) — retained for up to 7 years to meet tax, accounting, and chargeback-defense obligations, even if you delete your account.
Course activity — kept while your access is active; deleted or anonymized within 30 days of account deletion.
Email engagement events (opens, clicks) — retained in Postmark for up to 12 months and then purged.
Support correspondence — retained for up to 3 years from the last message, then deleted.
Marketing consent records — retained for as long as we send you marketing emails plus 3 years after, so we can demonstrate consent if challenged.

Your rights

Depending on where you live, you may have the right to:

Request a copy of the personal data we hold about you.
Ask us to correct anything inaccurate.
Ask us to delete your data (subject to records we have to keep by law, such as purchase records for tax).
Object to or restrict certain processing, including marketing email.
Withdraw consent for anything you previously opted in to.
Receive your data in a portable, machine-readable format (data portability).

To exercise any of these rights, email support@strongconfidentliving.com. We respond to verifiable requests without undue delay and at the latest within one month of receipt. Where a request is complex or we have received a number of requests from you, we may extend that period by up to two further months and will tell you why.

We will not discriminate against you for exercising these rights.

Automated decision-making. We do not use your personal information for automated decision-making, including profiling, that produces legal or similarly significant effects about you.

U.S. state privacy rights (CCPA / CPRA and similar)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to:

Know what categories of personal information we collect, the sources, the business or commercial purpose, and the categories of third parties we share it with.
Access the specific pieces of personal information we hold about you.
Correct inaccurate personal information.
Delete personal information we collected from you, subject to legal exceptions.
Opt out of the “sale” or “sharing” of personal information.
Limit the use of sensitive personal information.
Be free from retaliation for exercising any of these rights.

Do Not Sell or Share My Personal Information. We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising. We have not sold or shared personal information in the prior 12 months and do not plan to. Because there is nothing to opt out of, we do not currently process Global Privacy Control signals, but if we ever begin sharing or selling we will honor them. The categories of personal information we collect, as defined by the CCPA, are: identifiers (such as your name, email address, and account ID); commercial information (purchase history); internet or other electronic network activity (course-progress logs, email opens and clicks); and inferences drawn from the above (e.g. which topics you appear interested in). We do not collect “sensitive personal information” as defined by the CPRA. To make any CCPA/CPRA request, email support@strongconfidentliving.com. We will acknowledge receipt of your request within 10 business days and respond substantively within 45 calendar days; we may extend that period once by another 45 days with notice to you. You may also use an authorized agent to submit a request on your behalf; we will need to verify their authority. Residents of other U.S. states with similar laws (Virginia, Colorado, Connecticut, Texas, Utah, Oregon, and others as they take effect) can use the same contact route to exercise equivalent rights.

EU / UK users (GDPR and UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data under the legal bases identified above: performance of a contract (to give you the account and course you paid for), your consent (for marketing email), our legitimate interests (to debug, secure, and improve the product), and legal obligation (for tax, accounting, and responding to lawful requests).

The controller of your personal data is Strong Confident Living LLC, 56 Oak Trail Rd, Hillsdale, NJ 07642, United States. You can reach us at support@strongconfidentliving.com.

You have the rights listed under “Your rights” above. You also have the right to lodge a complaint with the data-protection supervisory authority in the EU member state of your residence, place of work, or alleged infringement (a list is at edpb.europa.eu), or, if you are in the UK, with the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to address your concern first.

Canadian users (PIPEDA and Quebec Law 25)

If you are in Canada, we handle your personal information under the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws, including Quebec’s Act respecting the protection of personal information in the private sector (“Law 25”). You have the right to access, correct, and (where applicable) withdraw consent for the processing of your personal information, and to make a complaint to the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec. Because our servers and email provider are in the United States, your personal information will be transferred outside Canada and may be accessed by U.S. authorities under U.S. law. Contact support@strongconfidentliving.com to exercise any of these rights or to reach the person responsible for personal information protection at Strong Confident Living.

Cookies and similar technologies

We use a small number of cookies. The strictly-necessary ones (your sign-in session, security tokens, partner referral attribution) work without your consent because they are required to deliver the service you asked for. Any analytics or marketing cookies we add in the future will require your consent first; you will see a banner the first time you visit and can change your mind in your account settings.

Children

The service is not directed to children, and we do not knowingly collect personal information from them. Specifically:

In the United States, we do not knowingly collect personal information from children under 13. This is consistent with the Children’s Online Privacy Protection Act (COPPA).
In the EU, UK, and other regions where the GDPR or similar law applies, we do not knowingly collect personal information from children under 16 without verifiable parental consent.

If you believe a child has created an account, contact us at support@strongconfidentliving.com and we will delete the account and associated data.

Security

We use industry-standard safeguards (encryption in transit and at rest, hashed passwords, access controls, least-privilege tooling) to protect your information. No system is perfectly secure; if we ever experience a security incident affecting your personal information, we will notify you and the appropriate authorities as required by law.

Changes to this policy

When we make material changes we will notify you by email and update the “last updated” date at the top. Continued use after the change constitutes acceptance.