Privacy policy

Last updated: September 9, 2026

  1. ABOUT THIS PRIVACY POLICY

This Privacy Policy explains how Undonly collects, uses, discloses, retains, and protects personal information when you:

a. visit undonly.com;

b. create a customer account;

c. purchase or use our products;

d. subscribe to the Ultimate Carry Less Reset™;

e. receive our emails;

f. use the “I Took Five” feature;

g. contact us;

h. submit a review or testimonial; or

i. otherwise interact with Undonly.

This Policy also explains the privacy rights and choices that may be available to you.

  1. WHO CONTROLS YOUR INFORMATION

The controller or business responsible for your personal information is:

Salegency Radosław Bartczak
Operating as Undonly
ul. Mieczysława Karłowicza 13/5
40-145 Katowice
Poland

Email: emily@undonly.com
Website: https://undonly.com

In this Policy, “Undonly,” “we,” “us,” and “our” refer to Salegency Radosław Bartczak.

  1. INFORMATION WE COLLECT

Depending on how you interact with us, we may collect the following categories of personal information.

A. Contact information

This may include:

a. name;

b. email address;

c. telephone number;

d. billing address;

e. shipping address; and

f. country, state, province, region, city, and postal code.

B. Account information

This may include:

a. account login details;

b. customer profile information;

c. subscription status;

d. account preferences;

e. order history; and

f. communications associated with your account.

C. Order and transaction information

This may include:

a. products purchased;

b. order number;

c. purchase date;

d. subscription plan;

e. billing frequency;

f. amount paid;

g. discount or promotion used;

h. shipment status;

i. carrier and tracking information;

j. cancellation status;

k. refund or replacement information; and

l. payment status.

D. Payment information

Payments are processed by Shopify and applicable payment providers.

Depending on the payment method selected, payment information may be processed by Shopify Payments, Shop Pay, PayPal, Stripe, card networks, banks, or other payment providers displayed at checkout.

We generally do not receive or store your complete payment-card number. We may receive limited transaction information, such as:

a. payment status;

b. payment method type;

c. billing address;

d. transaction identifier; and

e. the last digits of a payment card.

Payment providers process payment information according to their own privacy policies and legal obligations.

E. Subscription information

This may include:

a. subscription start date;

b. next scheduled charge;

c. renewal history;

d. failed payments;

e. cancellation date;

f. subscription preferences; and

g. access status for digital program content.

F. “I Took Five” and Reset information

When you use the “I Took Five” feature, we may collect and record:

a. whether you completed a Morning Moment;

b. whether you completed an Evening Moment;

c. the date and approximate time of completion;

d. your Current Rhythm;

e. your Total Resets;

f. whether the same moment was previously recorded;

g. milestone eligibility;

h. whether a digital milestone card was made available; and

i. technical information needed to validate the action.

This information is used as a motivational and program-delivery feature.

It is not used as a medical record, diagnosis, clinical assessment, mental-health assessment, or measurement of your health.

We do not ask you to provide medical diagnoses, treatment information, symptoms, or other clinical information through the “I Took Five” feature.

G. Email and communication information

This may include:

a. emails and messages you send us;

b. customer-support requests;

c. complaint information;

d. refund and replacement requests;

e. survey responses;

f. whether an email was delivered;

g. whether an email was opened;

h. whether a link was clicked;

i. email preferences; and

j. unsubscribe status.

Email open data may be affected by privacy settings, image blocking, automated security tools, and similar technology and may not always be accurate.

H. Product complaint and adverse-event information

If you report a product issue or possible adverse event, we may collect:

a. your name and contact information;

b. the product name;

c. order number;

d. batch or lot number;

e. product use information;

f. description and timing of the event;

g. photographs;

h. relevant health information you voluntarily provide;

i. information about other products or medications involved; and

j. other information required to investigate or report the matter.

We collect this information to protect customer safety, investigate complaints, comply with legal reporting and recordkeeping obligations, cooperate with manufacturers and fulfillment providers, and respond to regulatory authorities.

Do not send medical information that is not relevant to the report.

I. Reviews, testimonials, and user content

If you voluntarily submit a review, story, testimonial, photograph, audio, video, or other content, we may collect:

a. the content you submit;

b. your name or chosen display name;

c. your email address;

d. your consent preferences;

e. information about the product or program used; and

f. any benefit or incentive connected with the submission.

We will obtain appropriate permission before using identifiable testimonial content in marketing.

Submitting a testimonial is voluntary and is not required to receive an earned 10-Reset Card.

J. Device and technical information

This may include:

a. IP address;

b. browser type;

c. device type;

d. operating system;

e. device and advertising identifiers;

f. language;

g. time zone;

h. approximate location derived from IP address;

i. referring website;

j. pages viewed;

k. links clicked;

l. session activity;

m. dates and times of visits;

n. error and diagnostic information; and

o. cookie and consent preferences.

K. Shopping and website activity

This may include:

a. products viewed;

b. pages visited;

c. items placed in a cart;

d. checkout activity;

e. purchases;

f. search activity;

g. interaction with website features; and

h. response to advertisements.

L. Advertising and audience information

Subject to your consent and privacy choices, we may collect or generate:

a. advertising identifiers;

b. cookie identifiers;

c. campaign and referral information;

d. advertisement views and clicks;

e. conversion events;

f. audience membership;

g. inferred product interests; and

h. information used for retargeting, measurement, attribution, and audience creation.

We do not intentionally send medical information, adverse-event reports, Reset completion records, Current Rhythm, Total Resets, private email content, or URL access tokens to advertising platforms.

  1. HOW WE COLLECT INFORMATION

We collect information:

a. directly from you;

b. automatically through our website and emails;

c. from Shopify and our service providers;

d. from payment providers;

e. from fulfillment providers and carriers;

f. from advertising and analytics providers;

g. from customer-support systems;

h. from social media or advertising platforms when you interact with our advertisements; and

i. from another person where they lawfully purchase a product for you or provide your details for delivery.

  1. HOW WE USE PERSONAL INFORMATION

We may use personal information to:

a. operate our website;

b. create and manage customer accounts;

c. process payments and orders;

d. provide and manage subscriptions;

e. deliver physical products;

f. provide digital program content;

g. send Morning and Evening Carry Less emails;

h. record and display Current Rhythm and Total Resets;

i. determine milestone eligibility;

j. deliver digital milestone cards;

k. provide customer support;

l. process cancellations, refunds, replacements, and complaints;

m. detect and prevent fraud, abuse, security incidents, and unauthorized activity;

n. maintain website and account security;

o. troubleshoot errors and improve website performance;

p. measure website traffic and product interest;

q. understand how customers use our website and program;

r. personalize website and email experiences;

s. send marketing where permitted;

t. conduct retargeting and create advertising audiences where permitted;

u. measure advertising performance and conversions;

v. request voluntary feedback, reviews, or testimonials;

w. investigate product complaints and adverse events;

x. comply with tax, accounting, consumer-protection, product-safety, regulatory, and legal obligations;

y. establish, exercise, or defend legal claims; and

z. enforce our Terms of Service and other policies.

  1. LEGAL BASES FOR PROCESSING

Where the GDPR, UK GDPR, or another law requiring a legal basis applies, we process personal information on one or more of the following bases.

A. Performance of a contract

We process information to:

a. process your purchase;

b. manage your subscription;

c. ship products;

d. provide program emails and digital content;

e. maintain your account;

f. record Reset activity requested by you; and

g. provide customer support.

B. Consent

We rely on consent where required for:

a. non-essential cookies;

b. analytics technologies;

c. advertising cookies and pixels;

d. personalized advertising;

e. certain email marketing;

f. optional testimonials and marketing permissions; and

g. processing specific information where consent is legally required.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

C. Legitimate interests

Where permitted, we may process information for legitimate interests such as:

a. preventing fraud;

b. protecting accounts and systems;

c. maintaining business records;

d. improving our services;

e. responding to customer questions;

f. understanding general business performance; and

g. establishing or defending legal claims.

We assess these interests against your privacy rights.

D. Legal obligations

We process information where necessary to comply with:

a. tax and accounting requirements;

b. consumer-protection laws;

c. payment and financial rules;

d. product-safety obligations;

e. adverse-event reporting;

f. regulatory requests;

g. court orders; and

h. other applicable laws.

E. Vital interests and safety

In limited circumstances, we may process or disclose information where reasonably necessary to protect someone’s life, health, or safety.

  1. SHOPIFY

Our online store, checkout, customer accounts, and certain commerce functions are provided by Shopify.

Shopify may process:

a. contact information;

b. account details;

c. order and transaction information;

d. payment information;

e. device and browser information;

f. cookie information; and

g. shopping activity.

Shopify may process information as our service provider, processor, or independent controller depending on the activity.

Shopify’s privacy information is available at:

https://www.shopify.com/legal/privacy

  1. KLAVIYO

We use Klaviyo to provide program emails, transactional communications, email marketing, customer segmentation, and communication analytics.

Klaviyo may process:

a. name;

b. email address;

c. purchase and subscription information;

d. customer profile information;

e. email delivery, open, and click information;

f. consent and unsubscribe status;

g. program stage; and

h. information needed to deliver Carry Less emails.

Klaviyo’s privacy information is available at:

https://www.klaviyo.com/legal/privacy/privacy-notice

  1. VERCEL

We use Vercel to host or operate parts of the “I Took Five” and Reset tracking system.

Vercel may process technical information such as:

a. IP address;

b. request date and time;

c. browser and device information;

d. server and security logs;

e. requested URL;

f. error information; and

g. technical identifiers required to operate and protect the service.

Vercel’s privacy information is available at:

https://vercel.com/legal/privacy-policy

  1. UNIQUE EMAIL LINKS AND TOKENS

Carry Less emails may contain unique links or tokens that allow our system to:

a. identify the relevant customer or subscription;

b. identify the Morning or Evening Moment;

c. prevent duplicate counting;

d. record completion;

e. display Current Rhythm and Total Resets; and

f. determine milestone eligibility.

A unique link may be associated with your account. Do not forward, publish, or share private program links.

Unique links may appear in:

a. browser history;

b. email-security systems;

c. server logs;

d. website logs; and

e. diagnostic records.

We limit the information directly visible in these links and restrict their use to program functions. We do not intentionally use private program tokens for advertising.

We may deactivate, rotate, or replace a token where necessary for privacy, security, fraud prevention, or correct program operation.

  1. RESET DATA RETENTION

We retain identifiable Morning and Evening completion records, Current Rhythm, Total Resets, and milestone history while your subscription is active.

After your subscription ends, we retain this information for up to 12 months to:

a. allow customer-support review;

b. resolve tracking disputes;

c. maintain earned milestone records;

d. prevent reward abuse; and

e. support reactivation where requested.

After that period, we delete or anonymize the identifiable Reset information unless:

a. you request earlier deletion and no legal exception applies;

b. a longer period is required by law;

c. the information is required to establish or defend a legal claim; or

d. you consent to a longer period.

Anonymized information that can no longer reasonably identify you may be retained for statistical and service-improvement purposes.

  1. PAYMENTS

Payment information is processed by the payment provider selected at checkout.

Depending on availability and your selection, providers may include:

a. Shopify Payments;

b. Shop Pay;

c. PayPal;

d. Stripe;

e. card networks;

f. issuing and acquiring banks; and

g. fraud-prevention providers.

These providers may use information to:

a. authorize payments;

b. detect fraud;

c. process refunds;

d. manage disputes and chargebacks;

e. comply with financial laws; and

f. provide their own services.

Their processing is governed by their applicable privacy notices.

  1. FULFILLMENT, SHIPPING, AND SUPLIFUL

We may disclose information necessary to prepare and deliver an order to Supliful, its product providers, fulfillment facilities, carriers, customs authorities, and delivery partners.

This information may include:

a. name;

b. shipping address;

c. telephone number;

d. email address;

e. ordered products;

f. order number; and

g. delivery instructions.

We may also disclose product complaint and adverse-event information where necessary to investigate a product, protect customer safety, meet reporting duties, or coordinate a recall.

We do not authorize fulfillment providers to use customer information for their own unrelated advertising.

  1. ANALYTICS AND EXPERIENCE TECHNOLOGIES

Subject to your consent where required, we plan to use:

a. Google Analytics 4;

b. Microsoft Clarity; and

c. Hotjar.

These services may collect information about:

a. page views;

b. session activity;

c. clicks and navigation;

d. device and browser characteristics;

e. approximate location;

f. referring sources;

g. performance and error information; and

h. interactions with website elements.

Session-analysis tools must be configured to suppress or mask payment information, passwords, private account content, health information, and other sensitive fields.

We do not authorize these providers to record complete payment-card information, account passwords, private Reset tokens, adverse-event reports, or private messages.

Provider privacy information is available at:

Google:
https://policies.google.com/privacy

Microsoft:
https://privacy.microsoft.com/privacystatement

Hotjar:
https://www.hotjar.com/legal/policies/privacy/

  1. META AND TIKTOK ADVERTISING

Subject to your consent and applicable opt-out rights, we plan to use Meta Pixel, TikTok Pixel, and related advertising technologies.

These services may receive:

a. cookie and advertising identifiers;

b. IP address;

c. browser and device information;

d. pages viewed;

e. product views;

f. cart and checkout events;

g. purchase or conversion events;

h. campaign interactions; and

i. information used for measurement, retargeting, and audience creation.

We may use this information to:

a. show advertisements to previous website visitors;

b. measure advertisement performance;

c. understand conversions;

d. limit or manage advertisements;

e. create advertising audiences; and

f. identify people with interests similar to existing audiences.

Depending on applicable law, disclosure of personal information to advertising platforms for cross-context behavioral advertising may be considered “sharing,” “targeted advertising,” or, in some circumstances, a “sale,” even when we do not receive money for the information.

We do not sell personal information for money.

We do not intentionally disclose the following to Meta or TikTok for advertising:

a. adverse-event reports;

b. medical information;

c. Morning or Evening completion records;

d. Current Rhythm;

e. Total Resets;

f. testimonial drafts not approved for publication;

g. private communications; or

h. unique program access tokens.

Privacy information is available at:

Meta:
https://www.facebook.com/privacy/policy

TikTok:
https://www.tiktok.com/legal/page/us/privacy-policy/en

  1. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies, pixels, tags, local storage, software development tools, and similar technologies.

These technologies may be categorized as:

A. Strictly necessary

Required for:

a. website security;

b. cart and checkout functions;

c. customer accounts;

d. payment processing;

e. fraud prevention;

f. consent-preference storage; and

g. other services requested by you.

B. Functional

Used to remember settings and provide enhanced website functions.

C. Analytics

Used to understand website traffic, performance, and general use.

D. Advertising

Used for advertising measurement, retargeting, audience creation, and personalized advertising.

Non-essential analytics, functional, and advertising technologies will not be activated before consent where prior consent is required.

You can use our cookie banner to:

a. Accept;

b. Decline; or

c. Manage preferences.

Declining non-essential cookies will not prevent you from purchasing products or using strictly necessary website functions.

You can change your choices later through the “Cookie Preferences” or equivalent link in the website footer.

Browser settings may also allow you to block or delete cookies. Blocking strictly necessary cookies may affect website operation.

  1. GLOBAL PRIVACY CONTROL

Where required by applicable law, we recognize a valid Global Privacy Control signal as a request to opt out of the sale or sharing of personal information and targeted advertising for the browser or device sending the signal.

Because Global Privacy Control is generally device- and browser-specific, you may need to enable it separately on each browser and device.

  1. DO NOT SELL OR SHARE MY PERSONAL INFORMATION

We do not sell personal information for money.

However, our use of advertising technologies may constitute “sharing,” “targeted advertising,” or a “sale” under certain United States state privacy laws.

You may opt out through:

a. the “Do Not Sell or Share My Personal Information” link in the website footer;

b. the cookie-preference tool;

c. a supported Global Privacy Control signal; or

d. an email to emily@undonly.com.

You do not need to create an account to submit a cookie-based opt-out request.

An opt-out may be limited to the browser or device used unless we can reasonably associate it with your account.

We will not discriminate against you for exercising a privacy right.

  1. EMAIL MARKETING

Where permitted, we may send:

a. helpful resets;

b. Undonly updates;

c. product information;

d. educational content;

e. offers; and

f. special bonuses.

You may unsubscribe from optional marketing emails at any time by:

a. using the unsubscribe link in the email; or

b. contacting emily@undonly.com.

Unsubscribing from marketing does not cancel your subscription and does not prevent us from sending necessary communications concerning:

a. orders;

b. payments;

c. subscriptions;

d. cancellations;

e. product safety;

f. customer service; or

g. delivery of paid program content.

Where a jurisdiction requires prior consent for marketing, we will request that consent.

  1. WHEN WE DISCLOSE INFORMATION

We may disclose personal information to:

a. Shopify;

b. Klaviyo;

c. Vercel;

d. payment processors;

e. Supliful and product providers;

f. fulfillment facilities;

g. carriers and delivery partners;

h. Google Analytics;

i. Microsoft Clarity;

j. Hotjar;

k. Meta;

l. TikTok;

m. fraud-prevention and security providers;

n. professional advisers, including lawyers, accountants, insurers, and auditors;

o. government, customs, courts, regulators, and law-enforcement authorities where legally required; and

p. a buyer, investor, successor, or adviser in connection with a legitimate business transaction.

We require service providers acting on our behalf to process information only for authorized purposes and to apply appropriate protections, subject to applicable contracts and law.

  1. CONSUMER HEALTH AND WELLNESS INFORMATION

Some privacy laws define consumer health data broadly.

We do not intend the “I Took Five” feature to collect or infer a medical diagnosis, condition, treatment, or clinical health status.

We use Reset information only to:

a. provide the requested program function;

b. display progress;

c. determine milestone eligibility;

d. prevent duplicate or fraudulent activity;

e. provide support; and

f. improve the program using aggregated or anonymized information.

We do not sell Reset information.

We do not use Reset information for targeted advertising.

We do not disclose identifiable Reset information to Meta, TikTok, Google Analytics, Microsoft Clarity, or Hotjar for advertising or behavioral profiling.

We may disclose limited Reset information to service providers such as Shopify, Klaviyo, and Vercel only where necessary to operate the feature.

Adverse-event and medical information is used only for safety, support, legal, regulatory, insurance, or product-quality purposes.

Where a consumer health data law applies and requires consent or a separate notice, we will provide the required notice and obtain consent before conducting the regulated processing.

  1. INFORMATION WE DO NOT REQUIRE

We do not require you to provide:

a. a medical diagnosis;

b. therapy records;

c. genetic information;

d. biometric identification information;

e. precise geolocation;

f. government identification numbers, except where legally required; or

g. information about race, religion, sexual orientation, or political beliefs

to purchase or participate in the Daily Reset.

Please do not provide sensitive information unless it is reasonably necessary for a product-safety report, legal request, or customer-support matter.

  1. INTERNATIONAL DATA TRANSFERS

Undonly operates from Poland and uses providers that may process information in the United States, the European Economic Area, the United Kingdom, Canada, New Zealand, and other countries.

These countries may have privacy laws different from those in your location.

Where required, we use appropriate transfer protections, which may include:

a. adequacy decisions;

b. Standard Contractual Clauses;

c. the United Kingdom International Data Transfer Addendum;

d. contractual safeguards;

e. provider participation in an approved transfer framework; or

f. another legally recognized transfer mechanism.

  1. HOW LONG WE RETAIN INFORMATION

We retain personal information only for as long as reasonably necessary for the purpose collected and to meet legal, accounting, safety, and dispute-resolution obligations.

Typical retention considerations include:

a. account information: while the account remains open and for a reasonable period after closure;

b. orders, payments, refunds, and tax records: for the period required by applicable accounting and tax law;

c. subscription records: for the duration of the subscription and the applicable legal recordkeeping period;

d. Reset information: while the subscription is active and for up to 12 months after it ends;

e. marketing information: until you withdraw consent or object, with limited suppression data retained to respect your opt-out;

f. support communications: for as long as needed to resolve the request and manage related legal claims;

g. adverse-event and product-safety records: for the period required by applicable product-safety law;

h. testimonials and associated permissions: for the authorized use period and while needed to document consent;

i. fraud and security records: for as long as reasonably necessary to prevent and investigate abuse; and

j. cookie and advertising information: according to your consent settings, the cookie’s configured duration, and the relevant provider’s retention rules.

We may retain information longer if required by law, litigation, an investigation, a chargeback, a regulatory request, or a product recall.

When information is no longer needed, we delete, anonymize, or securely isolate it.

  1. SECURITY

We use reasonable administrative, technical, and organizational measures designed to protect personal information.

These measures may include:

a. access controls;

b. encrypted connections;

c. account authentication;

d. limited staff and provider access;

e. monitoring and logging;

f. fraud-prevention measures;

g. backups;

h. vendor management; and

i. incident-response procedures.

No internet transmission or storage system is completely secure. We cannot guarantee absolute security.

You are responsible for protecting your account credentials and private program links.

Contact emily@undonly.com if you believe your account, email link, or personal information has been compromised.

  1. YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have the right to:

a. know whether we process your personal information;

b. request access to personal information;

c. request correction of inaccurate information;

d. request deletion;

e. receive a portable copy of certain information;

f. restrict certain processing;

g. object to certain processing;

h. withdraw consent;

i. opt out of targeted advertising;

j. opt out of the sale or sharing of personal information;

k. limit certain uses of sensitive personal information;

l. appeal the denial of a request;

m. receive information about categories of information collected, used, and disclosed; and

n. receive equal service and pricing when exercising your rights.

These rights are subject to legal limitations and exceptions.

  1. HOW TO EXERCISE YOUR RIGHTS

Submit a request by emailing:

emily@undonly.com

Use the subject:

Privacy Request

Describe the right you want to exercise and provide enough information for us to locate the relevant records.

We may need to verify your identity before completing a request. Verification may involve confirming:

a. your email address;

b. order information;

c. account information; or

d. other information reasonably connected with your relationship with us.

We will not request more information than reasonably necessary.

If we cannot verify a request, we may be unable to provide account-specific information or delete records.

  1. AUTHORIZED AGENTS

Where applicable law permits, an authorized agent may submit a request for you.

We may request:

a. proof that you authorized the agent;

b. verification of your identity; and

c. confirmation that you want the agent to act for you.

We will not require separate account creation solely to exercise a privacy right.

  1. DELETION REQUESTS

You may request deletion of personal information by contacting emily@undonly.com.

Deletion of your customer account may not automatically cancel an active subscription. Cancel the subscription through “Manage Subscription” before requesting account deletion.

We may retain information where necessary to:

a. complete an order;

b. process a refund;

c. comply with tax or accounting law;

d. meet product-safety obligations;

e. maintain adverse-event records;

f. detect fraud or security incidents;

g. resolve disputes;

h. establish or defend legal claims;

i. respect an unsubscribe or opt-out request; or

j. comply with another legal obligation.

Where appropriate, we may anonymize information instead of deleting it.

  1. ACCESS AND PORTABILITY

You may request confirmation of whether we process your information and a copy of relevant personal information.

Where required by law, we will provide eligible information in a structured, commonly used, and machine-readable format.

We may withhold information where disclosure would adversely affect another person’s rights, reveal protected security information, or violate law.

  1. CORRECTION

You may update certain account information through your customer account.

You may also request correction by emailing emily@undonly.com.

  1. APPEALS

If we deny a privacy request and applicable law provides a right to appeal, you may appeal by emailing:

emily@undonly.com

Use the subject:

Privacy Appeal

We will review the appeal and respond within the period required by applicable law.

  1. CALIFORNIA AND OTHER UNITED STATES STATE NOTICES

For residents of states with applicable comprehensive privacy laws, the categories of personal information we may have collected during the preceding 12 months are described in Section 3.

The categories of sources are described in Section 4.

Our purposes are described in Section 5.

The categories of recipients are described in Section 20.

We do not knowingly sell personal information for money.

We may share identifiers, device information, internet activity, shopping activity, and advertising information with Meta, TikTok, and similar providers for cross-context behavioral advertising, subject to consent and opt-out rights.

We do not knowingly sell or share personal information of anyone under 18 for targeted advertising.

Eligible residents may use the rights and request methods described in Sections 18 and 26 through 32.

We will not discriminate against you for exercising an applicable privacy right.

  1. EUROPEAN ECONOMIC AREA AND UNITED KINGDOM

If the GDPR or UK GDPR applies, you may have rights to:

a. access;

b. correction;

c. deletion;

d. restriction;

e. objection;

f. portability;

g. withdrawal of consent; and

h. lodge a complaint with a supervisory authority.

Our lead privacy contact is:

emily@undonly.com

Because Undonly is established in Poland, you may contact the Polish data-protection authority:

President of the Personal Data Protection Office
Urząd Ochrony Danych Osobowych
https://uodo.gov.pl

United Kingdom residents may also contact:

Information Commissioner’s Office
https://ico.org.uk

  1. CANADA

Canadian residents may request access to and correction of personal information and may withdraw consent, subject to legal limitations.

We use personal information only for purposes that a reasonable person would consider appropriate in the circumstances.

Where consent is required for online behavioral advertising, cookies, or marketing, we will provide the required information and consent choices.

Questions or complaints may be sent to emily@undonly.com.

You may also contact the Office of the Privacy Commissioner of Canada:

https://www.priv.gc.ca

  1. NEW ZEALAND

New Zealand residents may request access to and correction of personal information, subject to applicable law.

Questions or complaints may be sent to emily@undonly.com.

You may also contact the Office of the Privacy Commissioner of New Zealand:

https://www.privacy.org.nz

  1. CHILDREN

The website, subscriptions, supplements, and program are intended for adults aged 18 and older.

We do not knowingly collect personal information from children.

If you believe a child has provided personal information to us, contact emily@undonly.com. We will investigate and delete the information where legally appropriate.

  1. AUTOMATED DECISION-MAKING

We may use automated systems for:

a. fraud prevention;

b. payment processing;

c. email delivery;

d. customer segmentation;

e. advertising audiences;

f. Reset counting; and

g. milestone eligibility.

We do not use solely automated decisions that produce legal or similarly significant effects about you unless we provide the information and safeguards required by applicable law.

  1. BUSINESS TRANSFERS

If Undonly is involved in a sale, merger, restructuring, financing, acquisition, or transfer of business assets, personal information may be disclosed to advisers and potential or actual transaction parties.

Any recipient must use the information consistently with applicable law and the privacy commitments that apply to the transferred information.

  1. LEGAL REQUESTS AND SAFETY

We may preserve or disclose information where we reasonably believe it is necessary to:

a. comply with law, regulation, legal process, or a valid government request;

b. enforce our Terms and policies;

c. detect or prevent fraud, abuse, or security incidents;

d. protect customers, Undonly, or others;

e. investigate a product-safety concern; or

f. establish, exercise, or defend legal claims.

We will assess legal requests and disclose only information reasonably necessary where permitted.

  1. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect changes in:

a. our products or services;

b. technology;

c. providers;

d. data practices; or

e. applicable law.

We will update the “Last updated” date.

If a change materially affects how we use personal information, we will provide additional notice or request consent where required.

  1. CONTACT US

Questions, complaints, and privacy requests may be sent to:

Emily at Undonly
emily@undonly.com

Data controller:

Salegency Radosław Bartczak
Operating as Undonly
ul. Mieczysława Karłowicza 13/5
40-145 Katowice
Poland