Privacy Policy

1. Introduction

The Within Project ("we", "us", "our") is committed to protecting your privacy and personal information. This Privacy Policy describes how we collect, use, store, and protect your data when you visit our website, purchase our products, participate in our programs, or use our services (collectively, the "Services").

By using our Services, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not access or use our Services.

2. Information We Collect

A. Information You Provide Directly

• Contact Information: Name, email address, phone number, mailing address
• Account Information: Username, password, profile preferences
• Payment Information: Billing details, transaction history (processed securely through payment providers)
• Program Participation: Information you share in courses, workshops, community forums, or coaching sessions
• Communications: Messages, feedback, testimonials, or survey responses

B. Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, click patterns, referral sources
• Cookies: We use cookies and similar tracking technologies to enhance your experience

C. Sensitive Information

In certain programs or services, you may choose to share personal reflections, wellness goals, or other sensitive information. We will only process this information with your explicit consent and will handle it with the highest level of care and confidentiality.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our Services and content
• Process your orders, registrations, and payments
• Deliver personalized experiences, recommendations, and insights
• Communicate with you about your account, programs, and updates
• Send newsletters, educational content, and promotional materials (with your consent)
• Respond to your inquiries and provide customer support
• Analyze usage patterns and improve our offerings
• Ensure security, prevent fraud, and comply with legal obligations

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Performance of Contract: To fulfill our obligations when you purchase products or services
• Consent: When you explicitly agree to our processing activities, such as receiving marketing communications
• Legitimate Interest: To operate, improve, and secure our business while respecting your rights
• Legal Obligation: To comply with applicable laws and regulations

You can withdraw your consent at any time by contacting us at info@the-within-project.com.

5. How We Share Your Information

We respect your privacy and do not sell your personal information. We may share your data only in the following circumstances:

• Service Providers: Trusted third parties who help us operate our business (e.g., payment processors, email service providers, hosting platforms)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• With Your Consent: When you explicitly authorize us to share your information

All service providers are contractually bound to protect your data and use it only for the purposes we specify.

6. Data Security & Storage

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission (SSL/TLS)
• Secure cloud storage with access controls
• Regular security audits and monitoring
• Limited employee access to personal data

While we take every precaution to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify you promptly in the event of any data breach.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained while your account is active and for a reasonable period after closure
• Transaction Records: Kept as required by tax and accounting laws (typically 7 years)
• Marketing Data: Retained until you unsubscribe or request deletion

You may request deletion of your personal data at any time by contacting us.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Restriction: Request limitation of processing in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for data processing at any time

To exercise any of these rights, please contact us at info@the-within-project.com. We will respond to your request within 30 days.

9. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content. Cookies are small text files stored on your device.

Types of Cookies We Use:

• Essential Cookies: Necessary for website functionality
• Performance Cookies: Help us understand how visitors use our site
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with your consent)

You can manage or disable cookies through your browser settings. Note that disabling cookies may affect certain website features.

10. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence. When we transfer data internationally, we ensure adequate protection through approved mechanisms such as:

• Standard Contractual Clauses approved by relevant authorities
• Adequacy decisions recognizing equivalent data protection standards
• Other legally approved transfer mechanisms

11. Children's Privacy

Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child without appropriate parental consent, we will delete it promptly.

If you believe we have inadvertently collected information from a child, please contact us immediately at info@the-within-project.com.

12. Third-Party Links

Our website may contain links to third-party websites, plugins, or applications. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

13. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated policy on this page with a revised "Last updated" date.

For significant changes, we will provide prominent notice or seek your consent where required by law. We encourage you to review this policy regularly to stay informed about how we protect your information.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.