Privacy Policy
Master Anshin (the "Service", "we", "us") respects your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have over it under the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA).
Contents
1. Data controller
The data controller responsible for your personal data is the operator of masteranshin.clickdrop.online. You can reach us at Contact us.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Newsletter / lead capture | Email address you submit on /free-reset/; first name if you provide it | You give it to us directly |
| Order / payment metadata | If and when payment is enabled: name, billing email, country, last 4 digits of card and Stripe transaction id. We never see or store full card numbers. | You give it to us; Stripe sends back metadata |
| Server logs | IP address, user agent, referrer, requested URL, timestamp, response code | Automatically captured by nginx |
| Cookies (necessary) | Session preferences, your cookie consent choice | Set by our server |
| Cookies (analytics, opt-in only) | Anonymous page-visit counts, country at country level, referring source. Only loaded after you click Accept in the banner. | Set by our analytics provider if you opt in |
| Contact / support emails | The contents of any message you send us | You give it to us directly |
3. Why we collect it (legal bases under GDPR)
- To deliver the newsletter you subscribed to — legal basis: your explicit consent (Art. 6(1)(a) GDPR).
- To fulfill orders and provide customer support — legal basis: performance of a contract (Art. 6(1)(b)).
- To keep server logs for security, abuse prevention, and operational debugging — legal basis: our legitimate interest in keeping the service safe (Art. 6(1)(f)).
- To comply with our legal obligations (tax records, lawful requests) — Art. 6(1)(c).
- To improve the site via aggregated, anonymized analytics — only with your explicit, opt-in cookie consent.
4. Third-party processors we use
| Provider | Purpose | Data shared | Location |
|---|---|---|---|
| Hostinger / Clickdrop (hosting) | Serving the site, storing newsletter list and order records | All site data, server logs | EU (DE/NL) |
| Stripe (payments, when enabled) | Processing payments for digital products | Order data, billing details | EU / US (Standard Contractual Clauses) |
| Google (YouTube, Search Console, Drive) | Hosting videos, indexing the site, file storage for our team | Only public content and aggregate analytics. Search Console gives us page-level performance, not individual visitor data. | EU / US (SCCs) |
| ElevenLabs, KIE.ai, Blotato (content tools) | Generating our own audio, video, and cross-platform publishing of our content | No visitor data. Only our own brand assets. | US (SCCs where applicable) |
| Sender (newsletter delivery, when enabled) | Sending the email newsletter you opted into | Your email and first name; engagement metrics (open/click) | EU |
5. How long we keep your data
- Newsletter subscriptions: until you unsubscribe, then deleted within 30 days.
- Order records: 7 years (legal obligation in most jurisdictions for tax records).
- Server logs: 14 days, then rotated and deleted.
- Support emails: 24 months after the last reply.
- Cookie consent record: 12 months, after which we ask again.
6. International transfers
Some of our processors operate servers in the United States. Where this is the case, transfers are protected by the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, the EU-U.S. Data Privacy Framework.
7. Your rights
If you are in the EU, UK, EEA, Switzerland, or California, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Erase your data ("right to be forgotten").
- Restrict or object to our processing.
- Portability: receive your data in a structured, machine-readable format.
- Withdraw consent at any time. For the newsletter, every email has a one-click unsubscribe.
- Complain to your local data protection authority. Find yours at edpb.europa.eu.
- California residents: under CCPA you may also request that we do not sell or share your data (we do neither).
To exercise any of these rights, email Contact us. We respond within 30 days.
8. Cookies and tracking
See our Cookies Policy for the full list of cookies and how to manage them. You can change your choices at any time using the cookie settings link in the footer.
9. Children
Master Anshin is intended for adults seeking general wellness content. We do not knowingly collect personal data from anyone under 16. If you believe a minor has provided us data, contact us and we will delete it.
10. Changes to this policy
If we make a material change, we will update the "Last updated" date at the top and, where legally required, notify newsletter subscribers by email at least 30 days before the change takes effect.
11. How to contact us
Email: Contact us
Subject line: "Privacy request" so we can route it correctly.