Privacy Policy — PassYourTHCTest

PassYourTHCTest is an independent research desk operated by MLM Holdings Group, LLC, an Ohio limited liability company. MLM Holdings Group, LLC is the data controller for the personal information described here, and "we" and "us" below mean that company.

This policy describes what the website at passyourthctest.com actually does with your data. We have kept it specific rather than generic: where a third party is named, it is one we genuinely use.

1. What we collect

1.1 Information you give us

Email address and first name — only if you sign up for the 10-day email course, either on the course page or through the calculator's optional email step.
Email address — only if you subscribe to the blog newsletter.
Purchase details — handled entirely by Shopify when you buy the guide. We never see or store your card details.

The contact form does not send anything to us over the network. It opens a message in your own email client, addressed to us, which you send yourself. Nothing is submitted to our servers.

The detection calculator runs entirely in your browser. Your weight, body fat, usage frequency and test type are never transmitted unless you choose to submit the email step, and even then only your email address and first name are stored — the estimate itself is discarded and is not attached to your record.

1.2 Information collected automatically

Analytics — only if you accept the cookie notice. See section 4.
Server logs — our host, Netlify, records standard request data including IP address for security and reliability. We do not use these logs to build profiles.

We do not run advertising pixels, session recording, heatmaps, or cross-site tracking of any kind.

2. How we use it

To send the email course or newsletter you asked for.
To deliver the guide you purchased, and to handle refunds.
To understand which pages are useful, in aggregate, if you have allowed analytics.
To keep the site secure and working.

We do not use your data to make automated decisions about you.

3. Who processes your data

We use a small number of processors, each for one job:

Brevo (Sendinblue SAS, France) — stores your email address and first name and sends the course and newsletter. Only those fields are sent to Brevo.
Shopify — runs the checkout and processes payment. They are the merchant of record for your purchase; their privacy policy governs the payment data you give them.
Google Analytics 4 — aggregate usage measurement, and only with your consent.
Netlify — hosts the site and serves every page.

3.1 We do not sell your data

We have never sold or rented personal data, and we do not share it for cross-context behavioural advertising. There is no affiliate or detox-industry money behind this site.

3.2 Legal requests

We would disclose data only where we are legally required to, and we would tell you unless we were prohibited from doing so.

4. Cookies and analytics

We use Google Analytics 4 to see which pages people find useful. It is off until you allow it. Analytics storage is set to denied before the Google tag is loaded, so no analytics cookie is written and no measurement is sent unless you press Accept on the cookie notice. Declining is remembered in exactly the same way accepting is. Advertising and personalisation storage are never enabled, and IP addresses are anonymised in the measurement we do receive.

The cookies and browser storage this site uses:

cookie_consent — your answer to the cookie notice. First-party, one year. Set whether you accept or decline.
Google Analytics cookies — only after you accept, and removed in effect by declining.
__Host-psifi.x-csrf-token — a security token sent only when a form talks to our API. It protects against cross-site request forgery and identifies nothing about you.
A local flag recording that you signed up for the course, and a flag preventing a purchase being counted twice if you refresh the confirmation page. Both stay in your browser and are never transmitted.

You can change your cookie choice at any time, and you can clear these at any point through your browser settings.

5. Your rights

Wherever you live, you can ask us to show you what we hold, correct it, delete it, or stop emailing you. Email privacy@passyourthctest.com and we will respond within 30 days.

5.1 If you are in the EU or UK (GDPR)

You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time. Our lawful basis is your consent for marketing emails and analytics, and legitimate interests for keeping the site secure. You may complain to your national data protection authority.

5.2 If you are in California (CCPA/CPRA)

You have the right to know what we collect and why, to delete it, to correct it, and to opt out of sale or sharing — though as stated above, we do not sell or share personal data. We will not discriminate against you for exercising these rights.

6. Data retention

Email subscribers — until you unsubscribe or ask for deletion.
Purchase records — as long as tax and accounting law requires.
Analytics — aggregated, and retained according to the Google Analytics retention setting on the property.

7. Security

The site is served over HTTPS with HSTS and a content security policy. Email addresses are masked in our server logs. Payment data never touches our infrastructure. No system is perfectly secure, but we do not hold much, which is the best protection we can offer you.

8. Children

Our terms require you to be at least 18 to use this site, and it is not directed at anyone younger. We do not knowingly collect data from under-18s; if you believe a minor has given us information, email us and we will delete it.

9. Emails

We send only what you asked for: the 10-day course, or the blog newsletter. Every email carries an unsubscribe link, and unsubscribing takes effect immediately. We do not send anything else to those lists.

10. Changes

If this policy changes we will update the date at the top. Material changes affecting how we use data you have already given us will be announced by email to affected subscribers.

11. Contact

Privacy questions and data requests: privacy@passyourthctest.com. Anything else: contact@passyourthctest.com, or the contact page.

The controller is MLM Holdings Group, LLC, Ohio, United States.