Last Updated: January 28, 2025

OVERVIEW
The Subconscious Codex (“we,” “us,” or “our”) operates thesubconsciouscodex.com and provides educational content, shadow work tools, and consciousness exploration resources. This Privacy Policy explains how we collect, use, and protect your personal information.
By using our services, including Shadow, you agree to this Privacy Policy.

INFORMATION WE COLLECT
Information You Provide Directly:
When you use Shadow or other services, we may collect:

Name (first and last)
Email address
Date of access
Any written responses you submit through Shadow questions (if applicable) Newsletter subscription preferences (if you opt in)

Information Collected Automatically:

IP address
Browser type and version
Device information
Pages visited and time spent
Referring website

We use cookies and similar tracking technologies to enhance your experience. You can disable cookies in your browser settings, though this may affect functionality.

HOW WE USE YOUR INFORMATION
We use collected information for:

Legal Protection: To maintain records of who has agreed to our Terms of Use and disclaimers
Account Management: To provide access to Shadow and other services
Communication: To send you important updates about our services (required)
Marketing: To send you The Digest and promotional content (only if you opt in)
Improvement: To analyze how our services are used and make improvements
Safety: To identify and prevent misuse of our platform

Legal Basis for Processing (EU/UK Users):
If you are in the European Economic Area (EEA) or United Kingdom, we process your personal data based on:

Consent: When you opt into marketing communications
Contractual Necessity: To provide Shadow and other services you’ve requested
Legal Obligation: To comply with applicable laws and maintain required records
Legitimate Interest: To improve our services and ensure platform security

HOW WE SHARE YOUR INFORMATION
We DO NOT sell or rent your personal information to third parties.
We may share your information only in these limited circumstances:

Service Providers: With trusted third-party services that help us operate our platform (e.g., email service providers, website hosting). These providers are contractually obligated to protect your data and may be located outside your country of residence.
Legal Requirements: If required by law, court order, or government request
Safety & Protection: To protect the rights, property, or safety of The Subconscious Codex, our users, or others
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner

INTERNATIONAL DATA TRANSFERS
The Subconscious Codex is based in the United States. If you are accessing our services from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers are located.
For EU/UK Users:
The United States may not provide the same level of data protection as your home country. However, we implement appropriate safeguards to protect your personal information, including:

Standard contractual clauses with service providers
Limiting data transfers to what is necessary
Implementing technical and organizational security measures

By using our services, you explicitly consent to the transfer of your information to the United States and other countries where we operate.

DATA RETENTION
We retain your information for:

Disclaimer/Terms Acceptance Records: At least 7 years (for legal protection)
Account Information: As long as your account is active, or as needed to provide services
Marketing Communications: Until you unsubscribe

You may request deletion of your personal information at any time by contacting us at thesubcodex@gmail.com. However, we may retain disclaimer acceptance records as required for legal compliance.

YOUR RIGHTS
All Users:

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate information
Deletion: Request deletion of your personal information (subject to legal retention requirements)
Opt-Out: Unsubscribe from marketing emails at any time

Additional Rights for EU/UK Users (GDPR):
If you are located in the European Economic Area or United Kingdom, you have additional rights:

Right to Restriction: Request that we limit how we use your data
Right to Object: Object to processing based on legitimate interests
Right to Data Portability: Request your data in a structured, machine-readable format
Right to Withdraw Consent: Withdraw consent for data processing at any time (without affecting prior processing)
Right to Lodge a Complaint: File a complaint with your local data protection authority

Additional Rights for California Residents (CCPA/CPRA):

Right to know what personal information we collect, use, and share
Right to delete personal information (subject to exceptions)
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to opt-out of sharing for cross-context behavioral advertising (we do not share for this purpose)
Right to limit use of sensitive personal information (we do not collect sensitive personal information)
Right to non-discrimination for exercising your privacy rights

To exercise any of these rights, contact us at thesubcodex@gmail.com. We will respond within:

30 days for general requests
30 days for CCPA requests (may extend to 45 days)
1 month for GDPR requests (may extend to 3 months for complex requests)

SECURITY
We implement reasonable technical and organizational security measures to protect your information from unauthorized access, alteration, disclosure, or destruction, including:

Encryption of data in transit (SSL/TLS)
Secure password storage
Limited access to personal data
Regular security assessments

However, no internet transmission is 100% secure. You use our services at your own risk.

CHILDREN’S PRIVACY
Our services are not intended for individuals under 18 years of age. We do not knowingly collect information from children. If we discover we have collected information from a child under 18, we will delete it immediately.
If you believe a child has provided us with personal information, please contact us at thesubcodex@gmail.com.

COOKIES AND TRACKING TECHNOLOGIES
We use cookies and similar technologies to:

Remember your preferences
Understand how you use our services
Improve user experience
Analyze website traffic

Types of Cookies We Use:

Essential Cookies: Required for the website to function
Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics)
Preference Cookies: Remember your settings and choices

Your Cookie Choices:

Browser Settings: You can disable cookies in your browser settings
Opt-Out Tools: Use browser extensions or opt-out tools for analytics tracking
EU/UK Users: You can manage cookie preferences through our cookie consent banner

For more information about cookies and how to manage them, visit www.allaboutcookies.org.

THIRD-PARTY LINKS
Our website may contain links to third-party websites or services (e.g., our somatic therapy directory). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before sharing your information.

EMAIL COMMUNICATIONS
Required Communications:
We may send you emails related to:

Account security
Important service updates
Policy changes
Disclaimer updates

You cannot opt out of these required communications while using our services.
Optional Marketing Communications:
If you opt in to The Digest or other marketing emails, you will receive:

Experimental consciousness theory
Shadow updates
New Codex releases
Workshop announcements

You may unsubscribe from marketing emails at any time by:

Clicking the “unsubscribe” link in any marketing email
Emailing us at thesubcodex@gmail.com

EU/UK Users: We will only send marketing emails if you have explicitly opted in (consent). You can withdraw consent at any time.

DATA PROTECTION OFFICER
We have not appointed a formal Data Protection Officer as we are not required to under GDPR. However, for all privacy inquiries, please contact us at thesubcodex@gmail.com.

EU REPRESENTATIVE
As we do not have an establishment in the EU, we are not required to appoint an EU representative under GDPR Article 27. If you are an EU resident with privacy concerns, please contact us directly at thesubcodex@gmail.com.

SUPERVISORY AUTHORITY (EU/UK USERS)
If you are located in the EU or UK and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.
Examples:

UK: Information Commissioner’s Office (ICO) – ico.org.uk
Ireland: Data Protection Commission – dataprotection.ie
Germany: Federal Commissioner for Data Protection and Freedom of Information
France: CNIL (Commission Nationale de l’Informatique et des Libertés)

Find your local authority: edpb.europa.eu

AUTOMATED DECISION-MAKING
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date.
For significant changes, we will notify you via:

Email (to the address you provided)
Prominent notice on our website
Banner notification upon login (if applicable)

EU/UK Users: If changes require new consent, we will obtain it before the changes take effect.
Your continued use of our services after changes constitutes acceptance of the updated Privacy Policy.

CONTACT US
If you have questions about this Privacy Policy or how we handle your information, please contact us:
Email: thesubcodex@gmail.com
Website: www.thesubconsciouscodex.com
Mailing Address:
The Subconscious Codex
Aberdeen, MD 21001
United States
Response Time: We aim to respond to all inquiries within 7 business days.

CONSENT
By using The Subconscious Codex services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and sharing of your information as described herein.
EU/UK Users: By clicking “I agree” or using our services, you explicitly consent to the processing of your personal data as described in this Privacy Policy, including the transfer of data to the United States.

Version 1.0 | Last Updated: October 28, 2025