Privacy Policy

This Privacy Policy explains how Dr. Steven Young (“we”, “us”, “our”) collects, uses, shares and protects personal information when you visit this website (the “Site”), join our email programs, apply for or attend our experiences, or buy one of our courses (together, the “Services”). You can reach us at any time at steven@stevenyoungalchemist.com.

Our courses are sold and delivered through a third-party checkout and community platform (Circle), with payments processed by Stripe. When you buy or log in to a course you also interact with those platforms under their own privacy policies, which apply alongside this one.

By using the Site you agree to the collection and use of information as described here. If you do not agree, please do not use the Site.

We collect information in three ways: information you give us, information collected automatically when you use the Site, and information we receive from the services we use to run our business.

• Information you give us: your name and email address when you request a free guide (such as Every Trigger Is a Temple), join an email program or newsletter; your name, email address, business or organisation and the answers you write when you submit an application (for example, for Spiritpreneuring); your contact details and message when you write to us; and testimonials or feedback you choose to share.
• Purchase information: when you buy a course, our course platform collects your name, email address, billing details and payment method. We do not receive or store your full card number. We may receive your name, email address, the product you bought, the order reference and the amount paid so we can support you and understand our sales.
• Information collected automatically: your IP address, approximate location derived from it, device and browser type, operating system, screen size, language, the pages you view and how long you stay, the links, buttons and videos you click, how far you scroll, the site that referred you, campaign parameters in the link you arrived from (such as utm_source), the click identifier of a referral or partner link you followed (dub_id), and identifiers stored in cookies or your browser's storage.
• Session analytics: our analytics tools may record how you interact with pages (mouse movement, clicks, scrolling and navigation) to help us understand and improve the Site. Text you type into forms and payment fields is masked and is not part of these recordings.
• Information from third parties: confirmation of purchases and course access from our course platform, delivery and engagement information from our email service provider, and aggregated or pseudonymous campaign performance data from advertising platforms.

We do not knowingly collect sensitive categories of personal information (such as health, religious or biometric data). Please do not include such information in application answers or messages unless it is necessary for your request.

We use personal information to:

• provide the Services, including delivering email programs, course access and the content you asked for;
• process and confirm purchases, manage refunds under our guarantee, and provide customer support;
• review applications and contact you about experiences you applied for;
• send you emails you signed up for, and, where permitted, information about our teachings, courses and offers (you can unsubscribe at any time);
• understand how the Site is used, fix problems, and improve our content, design and performance;
• measure and improve our marketing, including whether our advertising, links and referral partners led to visits, sign-ups or purchases, and credit partners for the sales they refer;
• detect, prevent and address fraud, abuse, security incidents and technical issues; and
• comply with legal obligations and enforce our Terms of Service.

Where data-protection law requires a legal basis, we rely on: performance of a contract (delivering a course or program you bought or joined); your consent (marketing emails and, where required, non-essential cookies and similar technologies, which you may withdraw at any time); our legitimate interests (operating, securing and improving the Site, understanding our audience and marketing our Services in ways you would reasonably expect); and compliance with legal obligations.

We and the service providers listed below use cookies, pixels, scripts, local storage and similar technologies ("cookies") on the Site. Some are necessary for the Site to work; others help us analyse usage and measure marketing. The tools currently in use are:

• Google Analytics 4 and Google Tag Manager (Google LLC): audience and behaviour analytics, and management of the measurement tags on the Site. Google may set cookies such as _ga and _ga_*. Learn more at policies.google.com/technologies/partner-sites, and opt out with the Google Analytics opt-out browser add-on.
• Meta Pixel (Meta Platforms, Inc.): measures whether our advertising on Facebook and Instagram leads to visits, leads and purchases, and helps us reach audiences who may be interested in our work. Meta may set the _fbp cookie and read the fbclid parameter. You can manage Meta ad preferences in your Facebook or Instagram settings.
• PostHog (PostHog, Inc.): product analytics, heatmaps, error monitoring and session recordings that show how visitors move through pages. Form inputs are masked. Data may be processed through a proxy on our own domain.
• Dub (Dub Technologies, Inc.): referral and partner link tracking. If you arrive through one of our short links or a partner's link, Dub records the click and the Site stores its identifier in a first-party cookie named dub_id for up to 90 days. If you then sign up, apply or buy, our server tells Dub that the click led to that sign-up or purchase, together with a pseudonymous customer identifier derived from your email address, the amount of any purchase and, unless we have switched this off, your name and email address, so that the link or partner can be credited. Learn more at dub.co/legal/privacy. Deleting the dub_id cookie stops later sign-ups and purchases being linked to the click.
• Circle (Circle.so, Inc.) and Stripe (Stripe, Inc.): our checkout and course community. Enrolling takes you from the Site to our checkout on Circle, where Circle and Stripe set their own cookies to run the checkout, prevent fraud and keep you signed in.
• Vimeo (Vimeo.com, Inc.): video playback. The player and its cookies load only after you press play.
• Vercel (Vercel Inc.): hosting and content delivery, including server logs used for security and performance.
• Browser storage set by the Site itself: the campaign parameters of the link you arrived from, kept for up to 30 days so that a later purchase can be attributed to the right campaign, and small values that remember your preferences.

You can control cookies through your browser settings, including blocking or deleting them, and many browsers let you send a Global Privacy Control signal. Blocking necessary cookies may stop parts of the Site (including checkout) from working. Where the law requires it, we will ask for your consent before setting non-essential cookies.

If you join an email program or buy a course, we may send you emails about that program or course and, where permitted, about related teachings and offers. Every marketing email includes an unsubscribe link; you can also unsubscribe by writing to us. Transactional emails (receipts, login details, replies to your questions) are sent regardless of marketing preferences because they are needed to provide the Services.

Our email service provider may use tracking pixels and link tracking to tell us whether an email was opened or a link clicked. This helps us understand what is useful and stop sending email that is not being read.

We do not sell personal information for money. We share it only as follows:

• Service providers who process it on our behalf and under our instructions: course and payment platforms, email delivery services, analytics and session-recording providers, hosting and content-delivery providers, form and automation tools, and customer-support tools.
• Our referral tracking provider (Dub), which receives the sign-up and purchase information described in the cookies section. Partners who refer you can see that their referral led to a sign-up or a sale.
• Advertising and measurement partners (currently Google and Meta) who receive the pseudonymous usage and conversion data described in the cookies section. Under some laws this may count as "sharing" for cross-context behavioural advertising; see "Your rights" for how to opt out.
• Professional advisers such as accountants, lawyers and insurers where necessary.
• Authorities, regulators and other parties where required by law, to respond to legal process, to protect our rights, property or safety or those of others, or to investigate fraud or security issues.
• A successor in the event of a merger, acquisition, financing, reorganisation or sale of all or part of our business, subject to this policy.

We keep personal information for as long as needed for the purposes described above and to meet legal, accounting and reporting requirements. As a guide: email-program and marketing records are kept while you remain subscribed and for a reasonable period after; application records for up to two years after the related experience; purchase and support records for as long as you have access to a course and for the period required by tax and consumer law; analytics data according to each provider's retention settings (typically 2 to 26 months); and session recordings for a shorter period. When information is no longer needed we delete or anonymise it.

Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; request deletion; restrict or object to certain processing; receive a copy of information you provided in a portable format; withdraw consent where processing is based on consent; and not be discriminated against for exercising these rights.

Residents of California and other U.S. states with comprehensive privacy laws may also have the right to know the categories of personal information collected, used and shared; to opt out of the "sale" or "sharing" of personal information and of targeted advertising; and to limit the use of sensitive personal information. To opt out of sharing for targeted advertising, use your browser's Global Privacy Control signal, adjust your ad settings with Google and Meta, or write to us.

To exercise any right, email steven@stevenyoungalchemist.com with the subject line “Privacy request”. We may need to verify your identity before acting on a request, and we will respond within the time required by applicable law. You may authorise an agent to make a request on your behalf. If you are in the EEA, UK or Switzerland and are not satisfied with our response, you can complain to your local data-protection authority.

We are based in the United States and our service providers may process information in the United States and other countries whose laws may differ from those in your country. Where we transfer information from the EEA, UK or Switzerland, we rely on safeguards recognised by applicable law, such as standard contractual clauses or an adequacy decision, and we take steps to ensure the information receives appropriate protection.

We use reasonable administrative, technical and organisational measures to protect personal information, including encryption in transit, access controls and reputable providers for payments and hosting. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you believe your interaction with us is no longer secure, please contact us immediately.

The Site and Services are intended for adults. We do not knowingly collect personal information from anyone under 16 years of age (or the age of digital consent where you live, if higher). If you believe a child has provided us with personal information, please contact us and we will delete it.

The Site links to and embeds services operated by others, including our course platform, video hosting and social networks. Their privacy practices are governed by their own policies, which we encourage you to read. We are not responsible for the content or privacy practices of third-party sites.

We may update this policy from time to time. The date at the top shows when it was last revised. If we make material changes we will take reasonable steps to let you know, for example by a notice on the Site or an email. Your continued use of the Site after a change means you accept the updated policy.

Questions, requests or concerns about this policy or your personal information can be sent to steven@stevenyoungalchemist.com. Please include enough detail for us to understand and respond to your request.