PRIVACY POLICY
Last updated: 7 April 2026
Arcane Holistics operates arcaneholistics.org. This policy explains what data we collect, why we collect it and how we handle it. We keep things simple because our business is simple: we sell a digital course and provide a free research terminal.
What We Collect
Email address. Collected when you create an account. Used to identify your account and deliver purchase confirmations.
Payment information. Processed entirely by Stripe. We never see, store or have access to your card number, expiry date or CVC. We receive a confirmation that payment was successful, along with a transaction identifier.
Authentication tokens. Session cookies are set when you log in. These are strictly necessary for the site to function and contain no personal information beyond your session identifier.
Why We Collect It
To provide you with access to the course you purchased, to send purchase confirmation emails and to maintain your authenticated session. That is the complete list. We do not use your data for marketing, profiling, advertising or any other purpose.
Third Parties
We use four third-party services, each for a specific purpose:
- Stripe processes payments. Their privacy policy is at stripe.com/privacy.
- Supabase handles authentication and database storage. Their privacy policy is at supabase.com/privacy.
- Railway hosts the application. Their privacy policy is at railway.app/legal/privacy.
- Resend delivers transactional emails. Their privacy policy is at resend.com/legal/privacy-policy.
We do not sell, share or transfer your data to any other party. We do not use analytics services, advertising networks or tracking pixels.
Cookies
We use only essential cookies required for authentication. These maintain your logged-in session and expire when you log out or after a reasonable inactivity period. We do not use analytics cookies, tracking cookies or any third-party advertising cookies.
Data Retention
Your account data (email address and purchase record) is retained for as long as your account exists. You may request deletion at any time by contacting us, and we will remove your data within thirty days.
Your Rights Under UK GDPR
Under the UK General Data Protection Regulation, you have the right to:
- Access the personal data we hold about you.
- Rectification of any inaccurate data.
- Erasure of your personal data.
- Portability of your data in a structured, machine-readable format.
- Objection to the processing of your personal data.
To exercise any of these rights, email us at the address below. We will respond within thirty days.
Contact
For any data requests, questions or concerns about this policy, email hello@arcaneholistics.org.