Privacy Policy

We take your privacy seriously. This policy explains what we collect at holdingdoors.com, how we use it, and the choices you have.

What we collect

• Newsletter — email address, and the page you subscribed from. We may store an IP address and browser user-agent for spam protection.
• Purchases — name, email, billing details handled by Stripe. We do not see or store full card numbers.
• Scheduling — name, email, and answers to the questions you fill in when booking through Cal.com.
• Book production — the responses, recordings, and interview notes you provide for Story to Strength.
• Admin accounts — email, hashed password, and sign-in activity for anyone with an admin login.

How we use it

• To send you the newsletter you asked for.
• To deliver the book, coaching, or consultation you purchased.
• To respond to your questions and manage your account.
• To protect the site from fraud and abuse.
• To meet legal and tax obligations.

Who we share it with

We share the minimum necessary with vetted service providers:

• Stripe — payment processing.
• Cal.com — appointment scheduling.
• Resend — sending newsletter and transactional email.
• Supabase / Lovable Cloud — website database and authentication.
• Anthropic — only when an admin explicitly uses the AI drafting tool. We do not send client, medical, or personally identifying information to Anthropic.

We do not sell your personal information.

Cookies

We use only the cookies required to run the site (for example, keeping an admin signed in). We do not use ad-tracking cookies.

Your choices

• Unsubscribe from the newsletter at any time using the link in any email.
• Ask us to see, correct, or delete the personal data we hold about you by emailing nathan@holdingdoors.com.
• Depending on where you live, you may have additional rights under GDPR, UK GDPR, or the California Consumer Privacy Act. Contact us to exercise them.

Children

This site is not directed to children under 13. We do not knowingly collect information from anyone under 13.

Security

We use industry-standard measures — encrypted transport, hashed passwords, role-based access, and least-privilege server functions — to protect your data. No system is perfectly secure; if we discover a breach that affects you, we will notify you as required by law.

Retention

We keep data only as long as needed for the purposes above or as required by law. You can request earlier deletion at any time.

Changes

If we make material changes to this policy, we will post the updated version here and update the "last updated" date.

Contact

Privacy questions: nathan@holdingdoors.com.