Privacy Policy

Short version: we collect the bare minimum needed to fulfill orders and send the newsletter. We don't sell your data. We use Stripe and PayPal for payments and Resend for email, and they get only the data they need to do their jobs.

What we collect

• Email address — from checkout, free-kit, or newsletter signup.
• Order data — which products you bought, when, total amount.
• Payment metadata — Stripe and PayPal handle the card details; we store the provider session/order ID but never the card number, expiry, or CVC.
• Server logs — IP, user agent, and basic request data, retained briefly for security and debugging.

What we do with it

• Deliver your kit downloads and re-downloads.
• Send order confirmations and re-download links.
• Send newsletter emails (only if you opted in).
• Operate and secure the site.

Third parties we use

• Stripe — primary card payments, sales-tax calculation.
• PayPal — alternative payment via PayPal balance / linked accounts.
• Resend — transactional and newsletter email.
• Cloudflare R2 — file storage for kit zips, license PDFs, and previews.
• Vercel — hosting.
• Neon — Postgres database.

Your rights

Email contact@drtyangl.com to unsubscribe, request a copy of your data, or request deletion. We honour all valid requests under GDPR, PIPEDA, and CCPA. Order records may be retained for tax and accounting purposes for the period required by law (typically 6 years in Canada).

Children

The site is not intended for users under 13. We do not knowingly collect data from anyone under 13.