This Privacy Policy sets out the principles governing the collection, processing, and protection of personal data of users accessing https://www.alexmandhara.com/ (the "Website"), as well as all associated digital tools, software, applications, and services operated by Mateusz Skawiński, doing business professionally as Alex Mandhara (hereinafter referred to as the "Data Controller," "we," "us," or "our").

This document is drafted in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR), the UK Data Protection Act 2018 (UK-GDPR), and relevant United States federal and state privacy statutes (including COPPA, CalOPPA, and the CCPA / CPRA).

1. Data Controller

The Data Controller responsible for your personal data is:

• Mateusz Skawiński (operating professionally as Alex Mandhara).

• Official Website: https://www.alexmandhara.com/

• Data Protection & Legal Inquiries: contact@alexmandhara.com

2. Categories of Data Collected

We collect only the data strictly necessary to deliver our services, provided by you voluntarily:

• Identification and Contact Data: Name, surname, and email address (submitted during account registration, checkout, or newsletter subscription).

• Profile and Natal Coordinates ("Soul Data"): Exact date of birth, time of birth, and place of birth. These parameters are technically required to compute psychonomic matrices, the "One Pattern" model, the "Soul Blueprint," and associated archetypal calculations.

• Payment and Billing Data: Records of transactions, invoices, and active subscriptions. Financial transactions are executed directly through certified, PCI-DSS-compliant payment processors (Stripe and Wix Payments). The Data Controller does not store or process full credit card numbers or raw authorization credentials on local servers.

• Technical and Diagnostic Log Data: IP address, browser type and version, operating system, time zone settings, referring URLs, pages visited, duration of visit, and system diagnostic data generated automatically by cloud infrastructure hosting our services (Wix and Render).

3. Purposes and Legal Bases for Processing

We process your personal data under the following legal frameworks:

• Performance of a Contract (Art. 6(1)(b) GDPR): To compute custom psychonomic matrices, manage user accounts within the proprietary system ("Life OS"), service active digital subscriptions, and grant access to specialized tools and content.

• Explicit Consent (Art. 6(1)(a) GDPR): To process your profile and natal data ("Soul Data"), based on your explicit consent granted at the moment you enter your birth coordinates into the calculation engine.

• Direct Communication and Support (Art. 6(1)(b) & (f) GDPR): To dispatch essential system notifications, resolve technical support tickets, and inform you of software or architectural updates.

• Legitimate Interests of the Controller (Art. 6(1)(f) GDPR): To maintain server security, prevent fraud and unauthorized access, debug backend computation errors, and analyze functional usage metrics to optimize interface efficiency.

4. Data Recipients and Third-Party Processors

We do not sell, rent, or trade your personal data to third parties, data brokers, or advertising networks. To ensure high availability and computational reliability, we entrust data processing to trusted technological infrastructure providers:

• Wix.com Ltd.: Frontend hosting, content management system (CMS), user authentication architecture, and primary database storage.

• Render Services, Inc. (Render): Secure backend hosting, computational API execution environment, and algorithm processing engine.

• Stripe, Inc. / Wix Payments: Secure financial infrastructure handling transactions, payment method vaulting, and recurring subscription billing.

• Diagnostic & Analytics Services: Anonymized metrics tracking system health, API response latency, and user interface workflows.

International Data Transfers:

When personal data of European Economic Area (EEA), UK, or Swiss residents is transferred to infrastructure providers located outside the European Economic Area (such as Render Services, Inc. or Stripe, Inc. in the United States), such transfers are safeguarded under the EU-U.S. Data Privacy Framework (DPF), the UK Extension thereto, or via the European Commission’s approved Standard Contractual Clauses (SCCs).

5. Data Security Measures

We implement rigorous technical and organizational measures to safeguard personal data:

• All data transfers between the frontend client (Wix) and the backend calculation engine (Render) occur over encrypted API connections using industry-standard HTTPS / TLS encryption protocols.

• Direct access to underlying databases is strictly restricted, isolated, and guarded by multi-factor authentication protocols.

• Users remain responsible for maintaining the confidentiality of their account credentials and passwords.

6. Data Retention Period

Your data is retained exclusively for the duration necessary to fulfill the purposes for which it was gathered:

• Account & Natal Data ("Soul Data"): Retained for the lifespan of your active user account.

• Account Deletion: Upon account deletion by the user, all associated profile information and natal calculation metrics ("Soul Data") are permanently erased from active operational databases.

• Transaction Records: Financial and invoicing records are retained for the statutory period mandated by applicable commercial, accounting, and tax legislation.

7. Your Statutory Rights (GDPR & UK-GDPR)

If you reside within the European Union, the European Economic Area, or the United Kingdom, you hold the following statutory rights regarding your personal data:

• Right of Access (Art. 15 GDPR): The right to obtain confirmation as to whether your data is being processed and to receive a copy of that data.

• Right to Rectification (Art. 16 GDPR): The right to correct inaccurate data or update incomplete parameters (including adjustments to your birth time or place).

• Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): The right to request the permanent deletion of your account and personal data.

• Right to Restriction of Processing (Art. 18 GDPR): The right to request the suspension of data processing under specific statutory circumstances.

• Right to Data Portability (Art. 20 GDPR): The right to receive your personal data in a structured, commonly used, and machine-readable format.

• Right to Withdraw Consent (Art. 7(3) GDPR): The right to revoke your consent for the processing of natal data at any time, without affecting the lawfulness of processing executed prior to withdrawal.

• Right to Object (Art. 21 GDPR): The right to object to data processing grounded in our legitimate interests.

• Right to Lodge a Complaint: The right to submit a formal complaint to a competent data protection supervisory authority—specifically the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych — PUODO) in Poland, the Information Commissioner's Office (ICO) in the UK, or your local European Union supervisory authority.

8. Notice to California and U.S. State Residents (CCPA / CPRA & CalOPPA)

If you reside in California or other U.S. states with comprehensive consumer privacy statutes:

• No Sale or Sharing of Personal Information: We do not sell your personal information, nor do we share your personal data with third parties for cross-context behavioral advertising.

• Do Not Track (DNT) Signals: Our systems do not currently alter data collection practices in response to automated browser "Do Not Track" signals, though you may manage cookies independently via your browser settings.

• Specific State Privacy Rights: You hold the statutory right to request access to, deletion of, and correction of your personal data, as well as the right to receive details regarding the categories of personal data collected, without facing discriminatory treatment. Requests may be submitted to contact@alexmandhara.com.

9. Children’s Privacy and Age Restrictions (COPPA Compliance)

The Website and its associated computational services are intended exclusively for individuals aged 18 and older (or the age of majority in your jurisdiction). We do not knowingly solicit, collect, or process personal data from children under the age of 13 (or under 16 within the European Economic Area).

If we discover that personal data has been collected from a child without verified parental consent, we will take immediate operational steps to permanently delete that information from our active servers and databases. If you believe a minor has provided us with personal information, please notify us immediately at contact@alexmandhara.com.

10. Cookies and Tracking Technologies

The Website utilizes essential and functional cookies to:

• Maintain active user authentication and secure logins;

• Preserve user preferences, parameters, and navigation state within the application ("Life OS");

• Ensure platform performance, load balancing, and firewall integrity.

You may adjust or disable cookies at any time via your web browser settings. However, disabling technical and essential session cookies may impair or prevent the correct operation of calculation modules and authenticated account features.

11. Amendments to this Policy

We reserve the right to revise or update this Privacy Policy to reflect changing legal requirements, security upgrades, or functional modifications of the platform. The current version will always be accessible on this page, marked with an updated "Last Modified" date.

12. Contact Information

For all questions, data protection inquiries, or requests to exercise your statutory privacy rights, please contact us through:

• Official Website Form: https://www.alexmandhara.com/

• Data Protection Inquiries: contact@alexmandhara.com