Privacy Policy

This policy explains what personal information we collect when you use crushingdirtyhabits.com (the “Site”) and the 21-Day Neuro-Reset Engine program (the “Program”), why we collect it, who we share it with, and the choices you have. We wrote it in plain English on purpose. If anything is unclear, email support@crushingdirtyhabits.com.

Crushing Dirty Habits is operated from British Columbia, Canada. Mailing address: available on request via support@crushingdirtyhabits.com.

1. What we collect

We collect only what we need to sell and deliver the Program and to stay in touch if you have asked us to.

Information you give us

• Name and email address when you sign up for a free guide, take a quiz, or buy the Program.
• Mobile phone number, only if you choose to receive SMS messages.
• Purchase details: what you bought, when, the amount, and the card brand and last four digits of the payment method. We never see or store your full card number.
• Program progress: which days you have completed, workbook entries you save in the dashboard, and quiz answers.
• Anything you send us by email, including workbook submissions for a refund request.

Information collected automatically

• Device and browser type, approximate location from your IP address, pages visited, and time on page.
• Cookies and similar technologies (see section 5).

2. Why we use it

• To process your purchase and give you access to the Program.
• To deliver the free guide or quiz result you asked for.
• To send the email and SMS sequences you opted into (see section 6).
• To answer support requests and handle refunds.
• To understand how the Site and Program are used so we can improve them.
• To detect fraud, secure our systems, and meet legal obligations.

We do not sell personal information. We do not rent or trade lists.

3. Who processes it

We use a small number of service providers. Each one receives only what it needs to do its job.

• Stripe processes payments. Your card details go directly to Stripe. We receive a confirmation, a payment token, and limited purchase data. Stripe’s own privacy policy governs how it handles card data.
• Google Firebase / Google Cloud hosts the Site and the Program dashboard and stores your account, progress, and workbook entries. Data may be stored on Google servers in the United States or other regions.
• Our email and SMS provider stores your name, email, phone number (if given), tags describing what you signed up for or bought, and message history. It sends the emails and texts described in this policy.
• Analytics and advertising tools (see section 5) receive usage data, mostly in aggregated form.

Some of these providers are located outside Canada. When your information leaves Canada it is subject to the laws of the country where it is stored and may be accessible to courts and authorities there. We choose providers that publish their security practices and are bound by contract to protect your data.

4. How long we keep it

You can ask us to delete your account and workbook content at any time (section 7). We will keep only what the law requires us to keep.

5. Cookies and analytics

The Site uses:

• Essential cookies that keep you logged in and remember your checkout. The Site does not work without them.
• Analytics cookies that tell us which pages people visit and where they drop off. We look at this in aggregate.
• Advertising cookies and pixels from platforms such as Meta, Google, TikTok, or YouTube, used to measure whether an ad led to a sign-up and to show relevant ads. These are set only if you accept them where a consent banner is shown, or where the law allows them by default.

You can block or delete cookies in your browser settings. Blocking essential cookies will break login.

6. Email and SMS consent (CASL)

We follow Canada’s Anti-Spam Legislation (CASL).

• We send commercial email or SMS only to people who gave express consent by entering their details in a form on our Site, or who bought from us and did not opt out.
• Every marketing email includes our name, a way to contact us, and a working unsubscribe link. Unsubscribe requests are honoured within 10 business days and usually immediately.
• SMS messages are sent only to numbers provided through a separate, clearly labelled opt-in. Reply STOP to any text to end messages. Reply HELP for help. Message and data rates may apply.
• Transactional messages (receipts, login links, refund confirmations) are not marketing and may be sent regardless of your marketing preferences.

We keep a record of when and how you consented.

7. Your rights

Canada (PIPEDA and British Columbia’s PIPA)

You may ask to see the personal information we hold about you, ask us to correct it, withdraw consent, and ask why we collected it. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

European Economic Area and United Kingdom (GDPR / UK GDPR)

If you are located there, you also have the rights to erasure, to restrict or object to processing, to data portability, and to lodge a complaint with your local supervisory authority. Our legal bases are contract (delivering what you bought), consent (marketing), and legitimate interests (security, analytics, and improving the Program).

California (CCPA / CPRA)

You have the right to know what we collect, to delete it, to correct it, and to not be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined in the CCPA, and we do not use sensitive personal information to infer characteristics about you.

8. Security

Access to the Program is protected by authenticated login. Data in transit is encrypted with TLS. Payment data is handled by Stripe under PCI-DSS. Only the people who need access to run the business have it. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the relevant privacy regulator as the law requires.

9. Children

The Site and Program are for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, email us and we will delete it.

10. Changes

We may update this policy. The effective date at the top will change, and for material changes we will email account holders. Continued use of the Site after a change means you accept the updated policy.

11. Contact