Privacy Policy

Last updated: September 30, 2026

This Privacy Policy (“Policy”) describes how Anxiety Wave (“Anxiety Wave”, “we”, “us”, “our”) collects, uses, discloses and otherwise processes the personal information described in this Policy, as well as the rights and choices individuals have regarding that personal information.

Who is responsible for your data. The controller of your personal information is Anxiety Wave, Laurens Jansz. Costerstraat 5, 6827 AR Arnhem, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 76883213. You can reach us at support@anxietywave.com.

1. Introduction and Scope

This Policy applies when a person (“you”, “your”, “user”) visits our website at anxietywave.com (the “Site”) or otherwise interacts with us online or offline, which includes when you use our programs, courses, coaching and community and interact with content available on our Site (all together, our “Services”). We refer to subscribers to our Services as our “members”.

For users outside the UK and the EEA: Use of our Services and any dispute over our privacy practices are subject to this Policy and our Terms and Conditions, including its applicable terms governing limitations on damages and the resolution of disputes.

For information about the privacy choices you have regarding your personal information, please see Section 7. Your Privacy Choices below.

If you are a resident of California, please also refer to Section 14. Additional Privacy Information for California Residents below for more information about the categories of personal information we collect and your rights under California privacy laws.

If you are a resident of Colorado, Connecticut, Utah, or Virginia, please also refer to Section 15. Additional Privacy Information for Colorado, Connecticut, Utah, and Virginia Residents below for more information about the categories of personal information we collect and your rights under these state privacy laws.

If you are a resident of the UK, EEA or Switzerland, please also refer to Section 16. Additional Privacy Information for UK, EEA and Swiss residents below for more information about the personal information we collect and your rights under GDPR.

Please note that, depending on how you interact or engage with us, we may provide you with other privacy notices with additional details about our information practices. For example, this Policy does not apply to our employees in the context of our employment relationship with them.

2. Personal Information We Collect

We collect personal information directly from you, automatically through your use of the Services, and from other unaffiliated sources. The personal information we collect varies depending upon your use of our Services and our interactions with you.

Personal Information We Collect Directly from You

In general, we may collect the following personal information from you:

Surveys and other information gathering. We offer surveys, quizzes and other opportunities on and off of our Services where we ask for information about you in order to better understand you and your interests, and so that we can reach out to you about our services and offerings that may be of interest to you and for other purposes.

Registration and profile information. When you subscribe to become a member or otherwise register for an account with us, we collect certain personal information from you, such as your name, email address, and phone number, as well as any personal information you post to your profile or account, including your birthday or preferences, or that you otherwise submit to us through your account.

Purchasing products. When you purchase products on our Services, including when you subscribe to become one of our members, we collect information from you, including your name, billing address, email address, telephone number, account log-in credentials, and your purchase history. We and our service providers also collect payment information, such as your payment card information and billing address and share these with entities that process your payment. We and our service providers will also collect information about you if you request a refund.

Communications, interactions and reviews. When you email, call, or text with us, use any chat feature we may offer on our Services, or otherwise communicate or interact with us and with our team for support or other purposes, or respond to surveys that we provide, we may collect and maintain records of your contact details and communications. We also maintain records of communications and information that you post in forums and in other areas of the Services, as well as on our social media channels, and information you provide to us related to any customer support requests. If you choose to post a review, your review will display your name and your review and rating of our Services.

Anxiety Wave newsletter. If you sign up on our Services to receive Anxiety Wave, our newsletter, we will collect your contact information, including your email address.

Events and other requests. We also collect personal information related to your participation in our events as well as other requests that you submit to us related to our Services. For example, if you register for or attend an event or live call that we host, we may collect information related to your registration for and participation in such event and we may record video and audio of events, as well as the contents of any online forums or chats that are part of the events. When you contact us, sign up for our mailing lists, or otherwise request information from us, we collect and maintain records of your requests.

Anxiety Wave Community. If you are a member and participate in our forums or similar events, your username and any information that you post, including, without limitation, content of your reviews, comments, and text will be available to, and searchable by, all Anxiety Wave members.

Personal Information We May Collect Automatically

We automatically collect personal information related to your use of our Services, including from cookies, pixel tags, and other similar technologies, such as:

Device and Browsing Information. When you visit or use our Services, we may collect IP address, browser type, domain name, access times, date/time stamps, operating system, language, device type, unique ID, Internet service provider, phone carrier and manufacturer, mobile advertising identifiers, referring and exiting URLs, clickstream data, and similar device and browsing information.

Activities and Usage. We may collect activity information related to your use of the Services, such as information about the links clicked, pages viewed, searches, features used, items viewed, time spent within the Services, keystrokes, mouse clicks, your interactions with us within the Services, and other activity and usage information. In addition, with your consent where required by applicable law, we may track information about the video and other content that you view on our Services and we may share that with our vendors and others who perform services for us.

Location Information. We may collect or derive general location information about you, such as through your IP address.

Personal Information We Collect from Other Sources

Payment Information. When you make a purchase or payment through the Services, the vendors who we have engaged to perform payment processing services collect purchase and payment information from you to process your payment, such as your credit card number, information about your purchase and your payment history. These vendors in turn provide us certain information about your payment transaction and your purchase such as your name, the amount of your payment, the billing location and information about the plan you have chosen.

Other Sources. In addition, we may collect and receive personal information from other individuals, including members, marketing and advertising agencies, analytics firms, social networks, telecommunications providers, and vendors who provide services to us. For example, we may receive personal information from data analytics and marketing providers to reach prospective members. In addition, if you log in to our Services using your Google credentials, we will receive from Google information about you, including your name, email address, profile picture and language preference.

3. How We Use Personal Information

We may collect, use, disclose and otherwise process the personal information that we have collected about you for the following purposes:

Services and Support. To allow you to create and maintain your account with us, provide and operate our Services, communicate with you about your use of the Services, including by text message or email address, provide troubleshooting and technical support, respond to your inquiries, and communicate with you about the Services.

Analytics and Improvement. To better understand how members access and use the Services and our product and service offerings, and for other research and analytical purposes, such as to evaluate and improve our Services and business operations, to inform our marketing and promotion activities, to develop our Services and its features, and for internal quality control and training purposes.

Customization and personalization. To tailor content we may send, suggest to you or display on the Services, including to offer location customization and personalized communications, help and instructions, and to otherwise personalize your experiences.

Communicate with You. To respond to your inquiries, send you requested materials and other information about our Services and offerings or third party information and offerings and information in which you think we may be interested, and to communicate through text messages about and as part of our Services. We may also use this information to send administrative information to you, for example, changes to our terms, conditions, and policies.

Marketing and Promotions. For marketing and promotional purposes. For example, to send you information about our Services, including by text message or email, such as newsletters and other marketing content, and any other information you sign up to receive. We also market and promote our events and webinars. We also may use certain information we collect to manage and improve our advertising campaigns so that we can better reach people with relevant content.

Research and Surveys. To administer surveys and questionnaires, such as for market research or user satisfaction purposes.

Planning and Managing Events. For event and webinar planning, and other management-related purposes, such as registration, attendance, connecting you with other event attendees, and contacting you about relevant events and Services.

Security and Protection of Rights and Interests. To protect the Services and our business operations, and to protect our rights or those of our stakeholders; to manage and respond to actual and potential legal disputes and claims; to prevent and detect fraud, unauthorized activities, unauthorized access, and other misuse; where we believe necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or unaffiliated entity, or violations of our Terms and Conditions; and to otherwise establish, defend, or protect our rights or interests.

Compliance and Legal Process. To comply with applicable legal or regulatory obligations, including as part of a judicial proceeding; to respond to a subpoena, warrant, court order, or other legal process; or as part of an investigation or request, whether formal or informal, from law enforcement or a governmental authority.

Auditing, Reporting, and Other Internal Operations. To conduct audits and assessments of our operations, privacy controls, security controls, financial controls, risk controls, and our compliance with legal obligations; to conduct assessments of our general business and its operations, accounting, recordkeeping and legal functions; and to maintain appropriate business records.

General Business and Operational Support. To assess and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions such as financings; to administer our business, accounting, auditing, compliance, recordkeeping, and legal functions; and to enforce company policies and procedures.

In addition, to the extent permitted by applicable law, we may combine the personal information we collect with information from publicly available and other sources for any of the purposes described above.

4. How We Disclose Personal Information

We may disclose the personal information we collect for the purposes described above and as follows:

Through the Site and community. We disclose some of the information that we collect by displaying it in our Services (for example, in our community) according to your account profile and settings. Certain information, such as your username, is always visible to others. You can select whether to hide or display other information, such as your email address.

Affiliates and Subsidiaries. We may disclose the personal information we collect to our corporate affiliates and subsidiaries.

Vendors and Services Providers. We may disclose the personal information we collect to vendors and to service providers who perform functions on our behalf, such as entities that provide payment processing, email transmission, survey administration, data hosting, analytics, marketing, and technical and customer support services.

Marketing and Analytics Providers. We may also disclose certain personal information, such as device and browsing history as well as activities and usage information, to marketing and advertising networks, data analytics providers, and other companies who provide marketing or analytics services on our behalf. For more information, please see Section 6. Cookies and Tracking below.

We may also disclose your personal information in the following circumstances:

To Operate Our Business. We may disclose personal information to our business partners, such as entities that offer payment processing services, to operate our business and provide our Services.

In Support of Business Transfers. If we or our affiliates are or may be acquired by, merged with, or invested in by another company, or if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may disclose or transfer the personal information we have collected from you to the other company. We may also disclose certain personal information as necessary prior to the completion of such a transaction, or other corporate transaction such as a financing or restructuring, to lenders, auditors, and external advisors, including attorneys and consultants.

Compliance and Legal Obligations. To comply with our legal and compliance obligations and to respond to legal process. For example, we may disclose personal information in response to subpoenas, court orders, and other lawful requests by government officials and law enforcement, including responding to national security or law enforcement disclosure requirements.

Security and Protection of Legal Rights and Interests. Where we believe doing so is necessary to protect the Services, our rights and property, or the rights, property, and safety of others. For example, we may disclose personal information to (a) prevent, detect, investigate, and respond to fraud, unauthorized activities, unauthorized access, illegal activities, and misuse of the Services, (b) situations involving potential threats to the health, safety, or legal rights of any person or unaffiliated entity, or (c) enforce, detect, investigate, and take action in response to violations of our Terms and Conditions. We may also disclose personal information related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, recordkeeping, and legal functions.

5. Aggregate and Deidentified Information

Notwithstanding anything else in this Policy, we may use, disclose, and otherwise process aggregate and deidentified information related to our business and the Services with unaffiliated entities for quality control, analytics, research, development, and other purposes. Where we use, disclose or process de-identified data (data that is no longer reasonably linked or linkable to an identified or identifiable natural person, household, or personal or household device) we will maintain and use the information in deidentified form and not to attempt to reidentify the information, except in order to determine whether our deidentification processes are reasonable and adequate pursuant to applicable privacy laws.

6. Cookies and Tracking

We and our service providers use cookies, pixels, local storage objects, log files, APIs, and other mechanisms, including session replay technology, to automatically collect information browsing, activity, device and similar information within our Services for analytics and to target advertising and content across our Services and third party sites and services. We use this information to, for example, analyze and understand how users of our Services access, use and interact with others through our Services, as well to identify and resolve bugs and errors in our Services and to assess secure, protect, optimize and improve the performance of our Services. You have certain choices about our use of cookies and tracking within the Services, as described in this section. We may also aggregate such information to analyze trends, administer our Services, and gather broad demographic information for aggregate uses.

Cookies. “Cookies” are alphanumeric identifiers we transfer to your device through your web browser for tracking purposes. Some cookies allow us to make it easier for you to navigate our Services, while others are used to enable a faster log-in process, support the security and performance of the Services, or allow us to track activity and usage data within the Services.

Pixel Tags. Pixel tags (sometimes called web beacons or clear GIFs) are tiny graphics with a unique identifier, similar in function to cookies. While cookies are stored locally on your device, pixel tags are embedded invisibly within web pages and online content. We may use these, in connection with our Services to, among other things, track the activities of users of our Services, help us manage content, and compile usage statistics. We may also use these in our emails to let us know when they have been opened or forwarded, so we can track response rates and gauge the effectiveness of our communications.

Local storage objects. Local storage is a web storage mechanism that allows us to store data on a browser that persists even after the browser window is closed. Local storage may be used by our web servers to cache certain information in order enable faster loading of pages and content when you return to our websites and to associate your activity with your profile. You can clear data stored in local storage through your browser. Please consult your browser help menu for more information.

Analytics. We use tools operated by unaffiliated companies, such as Google Analytics, to evaluate usage of our Services. These unaffiliated analytics companies use cookies, pixel tags, and other tracking technologies to collect usage data about our Services to provide us with reports and metrics that help us evaluate usage of our Services, improve our Services, and enhance performance and user experiences.

To learn more about Google’s privacy practices, please review the Google Privacy Policy at https://policies.google.com/technologies/partner-sites. You can also download the Google Analytics Opt-out Browser Add-on to prevent your data from being used by Google Analytics at https://tools.google.com/dlpage/gaoptout.

Cross-Device Tracking. We and our unaffiliated providers may use the information we collect about you within our Services and on other unaffiliated websites and services to help us and these unaffiliated websites identify other devices that you use (e.g., a mobile phone, tablet, other computer) to interact or engage with us or the Services.

Customer Lists and Matching. Subject to applicable law, we may disclose certain customer list information (such as your name, email address, and other contact information, which in most cases is hashed when it is shared) with unaffiliated entities to target ads and content to you and others with similar interests. In some cases, these unaffiliated entities may help us to enhance our customer lists with additional demographic or other information, so that we can better target our advertising and marketing campaigns.

Advertising. We work with unaffiliated ad networks, analytics, marketing partners, and others (all together, “unaffiliated ad companies”) to personalize content and display advertising within our Services, as well as to manage our advertising on unaffiliated sites. We and these unaffiliated ad companies may use cookies, pixels tags, and other tools to collect browsing and activity information within our Services (as well as on unaffiliated sites and services), as well as IP address, unique ID, cookie and advertising IDs, and other online identifiers. We and these unaffiliated ad companies use this information to provide you more relevant ads and content within our Services and on unaffiliated websites, and to evaluate the success of such ads and content.

7. Your Privacy Choices

We make available several ways for you to manage your personal information, including preferences regarding cookies, advertising, whether you want to receive certain marketing and promotional content from us, and choices regarding your account and profile information. Many of these are browser and device specific, which means that you need to set the preference for each browser and device you use to access our Services; in addition, if you delete or block cookies, you may need to reapply these preferences.

Account Information. If you are a member, you can review and update much of the personal information we maintain about you, by emailing us at support@anxietywave.com

Cookie Settings. To prevent cookies from tracking your activity on our Site or visits across multiple websites, you can set your browser to block certain cookies or notify you when a cookie is set; you can also delete cookies. The “Help” portion of the toolbar on most browsers will tell you how to prevent your device from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to delete cookies. Visitors to our Site who disable cookies will be able to browse the Site, but some features may not function.

Industry Ad Choice Programs. You can control how participating unaffiliated ad companies use the information that they collect about your visits to our Site, and those of unaffiliated entities, to display more relevant targeted advertising to you. If you are in the United States of America, you can obtain more information and opt out of receiving targeted ads from participating unaffiliated ad companies at aboutads.info/choices (Digital Advertising Alliance (DAA)). You may also download the DAA AppChoices tool (https://youradchoices.com/appchoices) to assist you in controlling interest-based advertising on apps on your mobile device. Individuals in the EU may obtain more information at the following link: youronlinechoices.eu (European Interactive Digital Advertising Alliance). Please note that opting out of participating unaffiliated ad companies does not opt you out of being served advertising altogether. You may continue to receive generic or “contextual” ads on our Services. You may also continue to receive targeted ads on other websites, from companies that do not participate in the above programs.

Marketing and Other Communications. You can opt out of receiving marketing emails from us by using the unsubscribe feature in any such email we send you. You can also opt out of texts and other communications from us by replying “NO” or “STOP” to texts we send to you.

Residents of California should read Section 14. Additional Privacy Information for California Residents below for information about additional rights under California privacy laws. Residents of Colorado, Connecticut, Utah, or Virginia, should also read Section 15. Additional Privacy Information for Colorado, Connecticut, Utah, and Virginia Residents below for more information about additional rights under relevant state privacy laws. UK, EEA and Swiss residents should read Section 16. Additional Privacy Information for UK, EEA and Swiss Residents below to learn about additional rights. For more information about our privacy practices and your privacy choices, you may contact us as set forth in the ‘Contact Us’ section below.

8. Children’s information

Our Services are not designed for children, and we do not knowingly collect personal information from children under the age of sixteen (16). If we discover that a child under 16 has provided us with personal data in violation of applicable law, we will delete such information from our systems. If you’re a parent and you believe we have collected your child’s information in violation of applicable law, please contact us as set forth below in Section 13. Contact Us.

9. External Links and Features

Our Services may contain links to unaffiliated websites or features. In addition, where permitted by applicable law, we may send you communications with links to unaffiliated third-party services or sites with content or information in which we think you may be interested. Any access to and use of such linked websites or features is not governed by this Policy, but instead is governed by the privacy policies of those unaffiliated entities. We are not responsible for the information practices of such unaffiliated entities, including their collection of your personal information. You should review the privacy policies and terms for any unaffiliated entities before using those websites or those features.

10. Security

We have implemented safeguards intended to protect the personal information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security.

11. Retention

Anxiety Wave retains the personal information we collect only as reasonably necessary for the purposes described in this Policy or otherwise disclosed to you at the time of collection. For example, we will retain your information as necessary to comply with our tax, accounting, and recordkeeping obligations, as well as an additional period of time as necessary to protect, defend or establish our rights, defend against potential claims, and comply with our legal obligations.

12. Changes to this Policy

This Policy is reviewed and updated periodically consistent with applicable law and to ensure it accurately describes our information practices. When we update this Policy, we will accordingly revise the “Last Updated” date at the top of this document and post this policy.

If we make any changes to this Policy that materially affect our practices regarding use of personal information we previously collected, we will endeavor to provide users with notice, such as by posting prominent notice on our Services.

13. Contact Us

If you have questions or concerns regarding this Policy or the handling of your personal information, please contact us at support@anxietywave.com

Anxiety Wave

Laurens Jansz. Costerstraat 5, 6827 AR Arnhem

The Netherlands

KvK: 76883213

14. Additional Privacy Information for California Residents

This section of the Policy provides additional information for California residents and describes our information practices as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and its implementing regulations (“CCPA”). Depending on how you interact or engage with us, we may provide you with other privacy notices with additional details about our privacy practices.

Scope. This section applies to “personal information” as defined by the CCPA, whether collected online or offline. This section does not address or apply to our handling of personal information that is exempt under the CCPA, such as publicly available information or aggregated or de-identified information.

Categories of Personal Information Collected and Disclosed. While our processing of personal information varies based upon our relationship and interactions with you, the table below identifies, generally, the categories of personal information (as defined by the CCPA) that we have collected about California residents in the past twelve (12) months, as well as the categories of third parties to whom we may disclose this information for a business or commercial purpose.

Sales and Sharing of Personal Information. California privacy laws define a “sale” as disclosing or making available personal information to a third-party in exchange for monetary or other valuable consideration, and “sharing” broadly includes disclosing or making available personal information to a third party for purposes of cross-context behavioral advertising. While we do not disclose personal information to third parties in exchange for monetary compensation, we may “sell” or “share” certain technical information, including IP address, digital identifiers, information about your web browsing and usage of our services, information about how you interact with our ads, and certain analytics information, with third party data analytics, marketing, and advertising partners. We do so in order to administer, improve and evaluate our Services and our advertising campaigns. We do not sell or share (as defined by the CCPA) sensitive personal information; nor do we sell personal information related to individuals who we know are under the age of 16.

Sources of Personal Information. In general, we may collect personal information from the following sources:

• From you;
• From other users of our Services;
• Internet service providers, operating systems and platforms;
• Advertising networks, social networks, and data analytics providers; and
• Publicly available information and data brokers; and
• Government entities.

Purposes of Collection, Use, and Disclosure of Personal Information. As described in more detail in Section 3. How We Use Personal Information and Section 4. How We Disclose Personal Information, we collect, use, disclose and otherwise process the above personal information for the following business or commercial purposes and as otherwise directed or consented to by you:

• services and support;
• analytics and improvement;
• customization and personalization
• communicating with you;
• marketing and promotions;
• research and surveys;
• planning and managing events;
• security and protection of rights and interests;
• compliance and legal process;
• auditing, reporting, and other internal operations; and
• and general business and operational support.

Sensitive Personal Information. Notwithstanding the purposes described above, we do not collect, use, or disclose sensitive personal information about you beyond the purposes authorized by the CCPA. We do not use or disclose your sensitive personal information other than as authorized pursuant to section 7027 of the CCPA regulations (Cal. Code. Regs., tit. 11, § 7027 (2022)).

Retention. For information regarding our retention practices related to your personal information, please see Section 11. Retention above.

Your Rights and Choices. The CCPA may provide you with specific rights regarding your personal information, subject to certain exceptions.

• Know/access: The right to know what personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you. The right to a copy of your personal data that we retain, in some cases in a portable (i.e., machine-readable, user-friendly) format.
• Deletion: The right to the deletion of personal information that we have collected about you.
• Correction: The right to correct inaccurate personal information that we maintain about you.
• Opt-out rights: The right to opt out of the “sale” or “sharing” (as such terms are defined under the CCPA) of your personal information.
• Limit certain uses and disclosures of sensitive personal information. The right to limit certain uses and disclosures of sensitive personal information; however, as noted above, we do not engage in uses or disclosures of “sensitive personal information” that would trigger such a right.
• Right to non-discrimination: The right not to be subject to discriminatory treatment for exercising your rights under the CCPA.

Submitting CCPA Requests. California residents may exercise their CCPA privacy rights as provided below:

Requests to know/access, correct, and delete. You may submit a request to Anxiety Wave to exercise your CCPA rights to know/access, to delete, and to correct your personal information held by us by submitting a privacy request to us by emailing us at support@anxietywave.com.

We will take steps to verify your request by matching the information provided by you with the information we have in our records. We will process your request based upon the personal information in our records that is linked or reasonably linkable to the information provided in your request. In some cases, we may request additional information in order to verify your request or where necessary to process your request. If we are unable to adequately verify a request, we will notify the requestor. Authorized agents may initiate a request on behalf of another individual by emailing us at support@anxietywave.com; authorized agents will be required to provide proof of their authorization and we may also require that the relevant consumer directly verify their identity and the authority of the authorized agent.

Requests to opt-out. You may opt out of any “sales” and “sharing” of your personal information by emailing us at support@anxietywave.com. You can also block or delete cookies through your browser settings, as described in Section 7. Your Privacy Choices.

Rights Under California Shine the Light Law. Under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83), California residents who provide us certain personal information are entitled to request and obtain from us, free of charge, information about the personal information (if any) we have shared with third parties for their own direct marketing use. Such requests may be made once per calendar year for information about any relevant third-party sharing in the prior calendar year. To submit a “Shine the Light” request, email support@anxietywave.com and include in your request a current California address and your attestation that you are a California resident.

Contact Us. Please see the “Contact Us” section above.

15. Additional Privacy Information for Colorado, Connecticut, Utah, and Virginia Residents

This section applies to the ColoPA, CPOMA, UCPA, and VCDPA (collectively, “State Privacy Laws”). For the purpose of this section, “Personal Data” means any information that is linked or reasonably linkable to an identified or identifiable natural person. Personal Data does not include de-identified data, publicly available information (as these terms are defined under the State Privacy Laws) or any other Personal Data otherwise excluded from the scope of the State Privacy Laws.

Please see Sections 2 (“Personal Information We Collect”) and 3 (“How We Use Personal Information”) for information about the categories of Personal Data we process as a controller and the purposes for processing such data. Additionally, please see Section 4 (“How We Disclose Personal Information”), for information about the categories of third parties to whom we disclose the categories of Personal Data described in Section 2.

If you are a Colorado, Connecticut, Utah, or Virginia resident, you may exercise the following rights with respect to your Personal Data (as this term is defined under the State Privacy Laws):

• To confirm whether or not we process your Personal Data and request access to such data;
• To delete Personal Data you have provided to us or that we have obtained about you;
• To correct inaccuracies in your Personal Data;
• To opt out of the sale of your Personal Data, and to opt out of the processing of your Personal Data: (i) for purposes of targeted advertising; and (ii) for certain types of profiling in furtherance of decisions that produce legal or similarly significant effect; and
• To obtain a copy of your Personal Data in a portable and, to the extent technically feasible, readily usable format.

To exercise any of these rights, including opting out of any “sales” or targeted advertising, email us at support@anxietywave.com. You can also block or delete cookies through your browser settings, as described in Section 7. Your Privacy Choices.

Appeal Process

If you are a Colorado, Connecticut or Virginia resident and if we refuse to take action on your request, you may appeal this refusal within a reasonable period after you have received notice of the refusal. You may file an appeal by emailing us at support@anxietywave.com

16. Additional Privacy Information for UK, EEA, and Swiss Residents

Why We Use Your Personal Information and Legal Basis. All processing and use of your personal information is justified by a ‘legal basis’ for processing. In addition, processing of sensitive personal information (such as health information) requires satisfying an additional condition, such as providing your explicit consent. In the majority of cases, processing will rely on one of the following legal bases:

• Contract performance: The processing is necessary to perform a contract with you or take steps to enter into a contract at your request, such as to enroll you as a member, process your purchase, perform our Services, or provide you our newsletter;
• Legal obligation: The processing is necessary for us to comply with a relevant UK, EEA or Swiss legal obligation;
• Legitimate interests: The processing is in our legitimate interests, which are not overridden by your interests and fundamental rights, such as to provide you with information and services requested by you on a non-contractual basis; or
• Consent: You have consented to the processing.

We use your information, including your personal information, for the following purposes, relying on the legal bases set forth below:

Services and Support. To allow you to create and maintain your account with us, provide and operate our Services that you request, communicate with you about your use of the Services, including by text message or email, provide troubleshooting and technical support at your request, respond to your inquiries, and communicate with you about the Services at your request. Our legal basis is contract performance or taking pre-contractual steps at your request.

Analytics and Improvement. To better understand how individuals access and use the Services and our product and service offerings, and for other research and analytical purposes, such as to evaluate and improve our Services and business operations, to inform our marketing and promotion activities, to develop our Services and its features, and for internal quality control and training purposes. Our legal basis is our legitimate interests in improving our Services to boost audience engagement and sales, in order to grow our revenue.

Customization and personalization. To tailor content we may send, suggest to you or display on the Services, including to offer location customization and personalized communications, help and instructions, and to otherwise personalize your experiences. Our legal basis is our legitimate interests in improving our Services to boost audience engagement and sales, in order to grow our revenue.

Communicate with You. To respond to your inquiries, send you requested materials and other information about our Services and offerings, and to communicate through text messages about and as part of our Services. We may also use this information to send administrative information to you, for example, changes to our terms, conditions, and policies. Our legal basis is contract performance or taking pre-contractual steps at your request.

Marketing and Promotions. For marketing and promotional purposes. For example, to send you promotional information about our Services, including by text message or email, such as newsletters and other marketing content, and any other information you sign up to receive. We also market and promote our events and webinars. We also may use certain information we collect to manage and improve our advertising campaigns so that we can better reach people with relevant content, for example through third party platforms. If you have signed up to receive newsletters on our Site, our legal basis is consent. If you are a member or former member, our legal basis for processing your personal information is our legitimate interest in promoting our Services to boost audience engagement and sales, in order to grow our revenue.

Research and Surveys. To administer surveys and questionnaires, such as for market research or user satisfaction purposes. Our legal basis is our legitimate interests in improving our Services to boost audience engagement and sales, in order to grow our revenue.

Planning and Managing Events. For event and webinar planning, and other management-related purposes, such as registration, attendance, connecting you with other event attendees, and contacting you about relevant events and Services. Our legal basis is contract performance or taking pre-contractual steps at your request.

Security and Protection of Rights and Interests. To protect the Services and our business operations, and to protect our rights or those of our stakeholders; to manage and respond to actual and potential legal disputes and claims; to prevent and detect fraud, unauthorized activities, unauthorized access, and other misuse; where we believe necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety or legal rights of any person or unaffiliated entity, or violations of our Terms and Conditions; and to otherwise establish, defend, or protect our rights or interests. Our legal basis is our legitimate interests in protecting our brand, reputation, and business, including by protecting our business and complying with applicable non-UK, EEA or Swiss laws at all times.

Compliance and Legal Process. To comply with applicable legal or regulatory obligations, including as part of a judicial proceeding; to respond to a subpoena, warrant, court order, or other legal process; or as part of an investigation or request, whether formal or informal, from law enforcement or a governmental authority. Our legal basis is our legitimate interests in protecting our brand, reputation, and business, including by complying with applicable non-UK, EEA or Swiss laws at all times. In the event that an obligation arises under UK, EEA or Swiss law, our legal basis is compliance with such UK, EEA or Swiss law.

Auditing, Reporting, and Other Internal Operations. To conduct audits and assessments of our operations, privacy controls, security controls, financial controls, risk controls, and our compliance with legal obligations; to conduct assessments of our general business and its operations, accounting, recordkeeping and legal functions; and to maintain appropriate business records. Our legal basis is our legitimate interest in administering our business as effectively as possible, so as to maintain and improve profitability.

General Business and Operational Support. To assess and implement mergers, acquisitions, reorganizations, bankruptcies, and other business transactions such as financings; to administer our business, accounting, auditing, compliance, recordkeeping, and legal functions; and to enforce company policies and procedures. Our legal basis is our legitimate interest in structuring and administering our business as effectively as possible, so as to maintain and improve profitability, and our interest in protecting our brand, reputation, and business, including by complying with applicable non-UK, EEA or Swiss laws at all times.

International Transfers of Personal Information. Some of the service providers we use to operate our Services (for example for hosting, email, payments, scheduling and analytics) are located outside the UK and the EEA, including in the United States.

We may transfer or disclose your personal information to a recipient in a country outside the UK/EEA (third country), which may not offer a level of protection equivalent to that in the UK/EEA. In particular, we may transfer your personal information to service providers, or they may transfer personal information to us or to other service providers within the United States, which has not been deemed to provide adequate protection by the UK government, the European Commission or the Swiss data protection authority. Similarly, if you opt-in to cookies on our Site, your personal information will be shared with third parties in the United States. In such cases, we will take steps to ensure that appropriate safeguards have been taken (for example, by entering into data transfer agreements using the European Commission approved Standard Contractual Clauses and UK Information Commissioner (ICO) approved Addendum), to provide adequate protection for your personal information.

You have the right to request and receive a copy of documentation demonstrating that appropriate safeguards have been put in place in order to protect your personal information for transfer to a third country by contacting us at support@anxietywave.com

Your Rights Regarding Your Personal Information

• Right to access – you have the right to request access to and a copy of any of your personal information that we hold, and to obtain information about the processing of that data.
• Right to correct – we will take steps in accordance with applicable legislation to keep your personal information accurate, complete, and up to date. You are entitled to have any inadequate, incomplete, or incorrect personal information corrected (that is, rectified) or completed.
• Right to withdraw consent – in the event your personal information is processed on the basis of your consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Data portability – where we are relying (as the legal basis for processing) upon your consent, or the fact that the processing is necessary to perform a contract to which you are party or to take steps at your request prior to entering a contract, and the personal information is processed by automated means, you have the right to receive all such personal information which you have provided us in a structured, commonly used, and machine-readable format, and also to require us to transmit it to another controller where this is technically feasible.
• Right to erasure – you are entitled to have your personal information erased under specific circumstances, such as where you have withdrawn your consent, where you object to processing based on legitimate interests and we have no overriding legitimate grounds (see below), or where personal information is unlawfully processed.
• Right to restriction of processing – you have the right to restrict our processing of your personal information (that is, allow only its storage) where: you contest the accuracy of the personal information, until we have taken sufficient steps to correct or verify its accuracy; where the processing is unlawful but you do not want us to erase the personal information; where we no longer need your personal information for the purposes of the processing, but you require such personal information for the establishment, exercise, or defence of legal claims; or where you have objected to processing justified on legitimate interest grounds (see below), pending verification as to whether we have compelling legitimate grounds to continue processing.
• Right to object to processing (including profiling) based on legitimate interest grounds – where we are relying upon legitimate interests to process personal information, you have the right to object to that processing based on grounds related to your personal situation. If you object, we must stop that processing unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or we need to process the personal information for the establishment, exercise, or defense of legal claims. Where we rely upon legitimate interest as a basis for processing, we believe that we can demonstrate such compelling legitimate grounds, but we will consider each case on an individual basis.
• Right to object to direct marketing (including profiling) – you have the right to object to our use of your personal information (including profiling) for direct marketing purposes, such as when we use your personal information to invite you to our promotional events.

You may opt out of receiving commercial emails from us by clicking on the opt-out or ‘unsubscribe’ link included in the marketing e-mails you receive. If you opt out of receiving promotional emails, we may still send you emails about your account, membership or any services you have requested or received from us.

Please contact us at support@anxietywave.com if you wish to exercise any of your rights, or if you have any enquiries or complaints regarding the processing of your personal information.

You also have the right to lodge a complaint with the supervisory authority of your habitual residence, place of work or place of alleged infringement, if you consider that the processing of your personal information infringes applicable law. The authority for the UK is the ICO, available at https://ico.org.uk/global/contact-us/. A list of data protection supervisory authorities in the EEA is available at http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.