Privacy Policy

Effective Date: June 9th, 2026
Last Updated: June 15th, 2026

I. Introduction

Welcome to Whole Brains Council (“we,” “our,” or “us”). This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit or use Whole Brains Council at wholebrainscouncil.org (the “Service”).

We are committed to protecting your privacy and complying with applicable privacy laws, including the European Union General Data Protection Regulation (“GDPR”), the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”), and the Children’s Online Privacy Protection Act (“COPPA”), where applicable.

By using our Service, you acknowledge the practices described in this Privacy Policy.

II. Information We Collect

We may collect the following categories of information:

Information You Provide Directly

• Name
• Email address
• Username
• Account credentials
• Customer support communications
• Information submitted through forms, surveys, or feedback requests

Information Collected Automatically

When you use our Service, we may automatically collect:

• IP address
• Device identifiers
• Browser type and version
• Operating system
• Language preferences
• Pages viewed
• Visiting timestamp
• Location information
• Time spent on pages
• Referring URLs
• Usage and diagnostic data

Cookies and Similar Technologies

We use cookies, pixels, local storage, and similar technologies to:

• Operate the website
• Remember preferences
• Analyze traffic
• Improve user experience
• Support security functions
• Deliver or measure advertising

Where required by law, we obtain consent before placing non-essential cookies.

III. Legal Bases for Processing GDPR

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process personal data under one or more of the following legal bases:

• Consent
• Performance of a contract
• Compliance with legal obligations
• Protection of vital interests
• Public interest tasks
• Legitimate business interests that do not override your rights and freedoms

IV. How We Use Information

We may use information to:

• Provide and maintain the Service
• Create and manage accounts
• Respond to inquiries
• Deliver customer support
• Improve products and services
• Monitor usage and performance
• Enforce terms and policies
• Comply with legal obligations
• Send communications, including marketing where legally permitted

V. How We Share Information

We do not sell personal information unless specifically disclosed and permitted by law.

We may share information with:

Service Providers

Companies that assist with:

• Hosting
• Analytics
• Payment processing
• Customer support
• Security monitoring
• Email delivery

These providers may process personal information only as instructed by us.

Legal Compliance

We may disclose information when required to:

• Comply with law
• Respond to legal requests
• Protect rights and safety
• Prevent fraud or abuse

VI. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have the following rights:

Right to Know

Request information about:

• Categories of personal information collected
• Sources of information
• Business purposes for collection
• Categories of third parties receiving information

Right to Access

Request a copy of personal information collected about you.

Right to Delete

Request deletion of personal information, subject to legal exceptions.

Right to Correct

Request correction of inaccurate personal information.

Right to Limit Use of Sensitive Personal Information

Where applicable, request limitations on certain uses of sensitive personal information.

Right to Opt Out of Sale or Sharing

If we sell or share personal information for cross-context behavioral advertising, California residents may opt out at any time.

Right Against Discrimination

We will not discriminate against you for exercising privacy rights.

To exercise these rights, contact us at:

Email: support@wholebrainscouncil.org

VII. GDPR Data Subject Rights

If GDPR applies to you, you may have the right to:

• Access your personal data
• Correct inaccurate data
• Delete personal data
• Restrict processing
• Object to processing
• Withdraw consent
• Data portability
• Lodge a complaint with a supervisory authority

Requests may be submitted using the contact information provided.

VIII. Children’s Privacy COPPA

Our Service is not directed to children under 13 years of age unless expressly stated otherwise.

We do not knowingly collect personal information from children under 13 without verifiable parental consent.

If we become aware that personal information has been collected from a child under 13 without appropriate consent, we will:

• Delete the information promptly
• Terminate related accounts where appropriate
• Take reasonable steps to prevent future collection

Parents or legal guardians who believe a child has provided information may contact us to review, delete, or stop further collection.

Requests may be submitted using the contact information provided.

IX. International Data Transfers

Personal information may be processed in countries outside your jurisdiction.

Where required by law, we implement safeguards such as:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Other lawful transfer mechanisms

X. Data Retention

We retain personal information only for as long as necessary to:

• Provide services
• Meet legal obligations
• Resolve disputes
• Enforce agreements
• Maintain security records

Retention periods vary depending on the nature of the information and legal requirements.

XI. Security

We implement reasonable technical, administrative, and organizational safeguards designed to protect personal information from:

• Unauthorized access
• Disclosure
• Alteration
• Destruction

No security system can guarantee absolute security.

XII. Cookies and Consent

Where required by law, users may:

• Accept cookies
• Reject non-essential cookies

Cookie choices can also be managed through browser settings.

XIII. Third-Party Websites

Our Service may contain links to third-party websites.

We are not responsible for the privacy practices, content, or security of third-party services.

Users should review the privacy policies of those services separately.

XIV. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

Changes become effective upon posting unless otherwise required by law.

The “Last Updated” date will indicate when revisions were made.

XV. Contact Information

Organization: Whole Brains Council
Privacy Officer: Genie, genie@wholebrainscouncil.org
Email: support@wholebrainscouncil.org