Effective date: November 1, 2025

This Privacy Policy explains how (Golden Path) we collects, uses, discloses, and safeguards personal information when you visit goldenpath.website and when you purchase or access our digital products, including memberships (monthly, yearly, lifetime) and one‑time digital downloads (collectively, the “Services”). The Site is provided in English and is available to users worldwide.

Quick summary: We collect only what we need to run the Site, fulfill orders, manage memberships and downloads, prevent abuse, and—if you opt in—send you updates. We never sell personal data.

1. Who we are (Data Controller)

Golden path
Address: goldenpath.website
Contact (privacy): goldenpatheu@gmail.com

If you are in the European Economic Area (EEA) or UK, goldenpath.website is the data controller of your personal data under the EU/UK GDPR.


2. What we collect

We collect and process the following categories of personal data when you use the Site or Services:

  • Account & Identity Data: name, username, password, country, language preference.

  • Contact Data: email address (used for account access, receipts, download links, support, and important service notices); optional billing address for tax/compliance where required.

  • Transaction & Membership Data: products purchased, plan type (monthly, yearly, lifetime), price, currency, renewal status, invoices/receipts, refund history.

  • Payment Data: we do not store full card numbers. Payments are processed by third‑party payment processors (e.g., [Stripe/PayPal/other]). We may receive limited data such as the last 4 digits of the card, card brand, and payment confirmation tokens.

  • Download & Access Logs: timestamps of logins, downloads, IP address, device/browser information, file identifiers, and anti‑abuse/fraud signals. This helps us provide access you paid for, enforce fair use, and secure the Site.

  • Support & Communications: messages you send us (email or forms), support tickets, and our responses.

  • Marketing Preferences: your opt‑in/opt‑out choices for newsletters and product updates.

  • Technical Data (Cookies and Similar Technologies): IP address, device type, operating system, browser type, referring/exit pages, and general location (city/country) derived from IP. See Cookies below.

We do not intentionally collect special categories of data (e.g., health, political opinions) and we do not conduct automated decision‑making that produces legal or similarly significant effects.


3. Sources of data

  • Directly from you when you create an account, purchase a plan or download, contact support, or sign up for emails.

  • Automatically via cookies, pixels, and similar technologies when you browse the Site.

  • From payment processors after you complete a transaction (payment status and limited card metadata).


4. How we use personal data (Purposes & legal bases)

We process personal data for the purposes below. Under EU/UK GDPR, the corresponding legal bases are listed in parentheses:

  1. Provide the Services: create and manage your account; authenticate you; deliver memberships and digital downloads; send download links by email; process renewals and cancellations. (Contract performance; Art. 6(1)(b)).

  2. Take payment and issue invoices/receipts: via our payment processors; handle taxes and accounting. (Contract performance; Legal obligation; Art. 6(1)(b), 6(1)(c)).

  3. Prevent fraud and abuse: secure accounts, limit unauthorized sharing, and enforce fair use of downloads. (Legitimate interests; Art. 6(1)(f)).

  4. Customer support & service notices: respond to messages, send important service and security notifications. (Contract performance; Legitimate interests; Art. 6(1)(b), 6(1)(f)).

  5. Improve the Site & products: analytics to understand performance, detect issues, and plan new content. (Legitimate interests; Art. 6(1)(f)).

  6. Marketing: with your consent, send newsletters, product updates, and promotions. You can unsubscribe at any time. (Consent; Art. 6(1)(a)).

  7. Compliance: comply with tax, accounting, consumer, and other legal requirements; respond to lawful requests from authorities. (Legal obligation; Art. 6(1)(c)).

5. Payments and digital delivery

  • We use third‑party payment processors (Stripe) to handle your payments securely. We do not store full credit/debit card numbers.

  • For one‑time purchases, downloads are typically provided immediately via on‑screen links and/or sent to your email. For memberships, access continues while your plan is active.

  • We may log download attempts and associate them with your account/IP to prevent abuse and ensure you receive what you purchased.


6. Cookies & similar technologies

We use cookies, pixels, and local storage to:

  • keep you logged in and remember your preferences (strictly necessary);

  • process orders and manage your cart/checkout (functional);

  • understand site performance and usage (analytics);

  • show or measure the effectiveness of optional marketing (marketing/advertising, used only if you consent where required).

Controls: You can manage cookies via your browser settings. Where required by law, we present a consent banner with choices. If you decline certain cookies, the Site may not function fully.

Example providers (configurable):

  • Analytics: Google Analytics
  • Payment: Stripe 
  • Email/CRM: Gmail

  • CDN/Hosting: Cloudflare


7. Sharing of personal data

We share personal data only with:

  • Service providers (processors): hosting/CDN, payment processors, email delivery providers, analytics, customer support tools, and anti‑fraud services, contracted under confidentiality and data‑processing terms.

  • Professional advisers: accountants, auditors, legal counsel, where necessary.

  • Authorities or third parties: when required by law or to protect our rights, users, or the public.

  • Business transfers: if we reorganize, merge, or sell parts of our business, your data may transfer as part of that transaction (subject to this Policy or a comparable policy).

We do not sell your personal data.


8. International transfers

We host and process data in Slovakia. If we transfer personal data outside your country (for example, outside the EEA/UK), we will use lawful transfer mechanisms such as Standard Contractual Clauses (SCCs) and implement appropriate safeguards.

9. Data retention

We keep personal data only as long as necessary for the purposes set out above:

  • Account data: retained while your account is active and for a reasonable period afterward to handle inquiries, disputes, and legal obligations.

  • Support communications: retained as needed for history and quality assurance.

  • Marketing data: retained until you unsubscribe or request deletion, or for a shorter period where required by law.

When data is no longer needed, we delete or anonymize it.


10. Security

We implement technical and organizational measures to protect personal data, including encryption in transit (HTTPS), restricted access, regular updates, and monitoring. However, no method of transmission or storage is 100% secure.


11. Your rights (EEA/UK and similar jurisdictions)

Subject to conditions and exceptions in applicable law, you may have the right to:

  • access your personal data and obtain a copy;

  • request correction of inaccurate or incomplete data;

  • request deletion (“right to be forgotten”);

  • restrict or object to processing, including processing based on legitimate interests;

  • withdraw consent at any time (for processing based on consent);

  • data portability (receive your data in a structured, commonly used format).

To exercise your rights, contact us at [goldenpatheu@gmail.com]. We may need to verify your identity. You also have the right to lodge a complaint with your local data protection authority (for the EEA, see https://edpb.europa.eu/about-edpb/about-edpb/members_en; for the UK, see https://ico.org.uk/).


12. Children’s privacy

The Services are not directed to children under 16 (or the minimum age of digital consent in your country). We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will take appropriate steps to delete it.


13. Third‑party links & content

The Site may link to third‑party websites or include third‑party content. We are not responsible for the privacy practices of those sites. Please review their privacy policies.


14. User‑generated content and licenses

If you post content (e.g., comments, reviews, community posts), that content may be publicly visible. Do not share personal information in public areas of the Site. We may moderate content to enforce our terms and protect users.


15. Communications preferences

  • Transactional emails: order confirmations, receipts, download links, critical service notices. You cannot opt out of these while using the Services.

  • Marketing emails (optional): newsletters or promotions, sent only if you consent (where required). You can unsubscribe using the link in each email or by contacting us.


16. How to contact us

For questions or requests about this Policy or your personal data, contact:
Email: [goldenpatheu@gmail.com]

17. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you (e.g., by email or prominent notice on the Site) before the new policy takes effect. The “Effective date” above shows when this Policy last changed.


18. Region‑specific information 

If you serve specific regions with unique requirements (e.g., Brazil LGPD, Canada PIPEDA, Australia Privacy Act), you can add addenda here summarizing local rights and contact points.


Cookie Notice 

We use cookies to run the Site, remember your preferences, process purchases, and—if you consent—measure performance and show relevant offers. Click Accept all to consent, Reject non‑essential to use only necessary cookies, or Customize to manage your choices. You can change your preferences anytime in Cookie settings.