Privacy Policy

Who we are

This website, rationalco.com, is operated by No Better Friend Entertainment LLC, business address at 3101 Ocean Park Blvd Suite 200, #261, Santa Monica, CA 90405

Questions or requests about privacy: email nancy@nobetterfriend.com.

Personal information we collect

In the last 12 months we have collected these categories of personal information (as named in the California Consumer Privacy Act):

• Identifiers: your name, email address and, if you give it, phone number; your IP address and device identifiers from cookies.
• Commercial information: the services you chose, prices, payment plan, coupon codes, order and payment status, and the date and version of the terms you agreed to.
• Internet or other electronic network activity: pages you visit on this site, links you followed to get here (for example a ?ref= or ad link), browser type and device, collected through cookies and our web server.
• Professional information you choose to share: details about your business that you give us when we work together.

We do not collect your card number or bank details. Payments are made on the secure pages of Stripe or PayPal, who handle that information under their own privacy policies.

We do not collect sensitive personal information as defined by California law, and we do not use any information to infer characteristics about you.

Where it comes from

• From you, when you fill in an order form, contact form or email us.
• Automatically, from your browser through cookies and server logs when you use the site.
• From our payment processors (Stripe and PayPal), which tell us whether a payment succeeded, failed or was refunded.
• From the link you used, such as a referral code or ad campaign tag in the web address.

How we use it

• to provide the services you ordered, schedule sessions and contact you about them
• to take payments, including payment plans, and to handle refunds
• to send your order confirmation and booking link
• to keep business, accounting and tax records
• to protect the site and our customers from fraud, spam and attacks
• to understand which channels bring us clients (the "How did you hear about us?" answer and referral links)
• to improve this website and our services

We do not use your information for any purpose that is incompatible with these without telling you first.

Who we share it with

We disclose personal information for business purposes to these categories of service providers, who may use it only to provide their service to us:

• Payment processors (Stripe, PayPal): identifiers and commercial information, to take payments.
• Website hosting, security and email providers AWS, Wordfence, Google: identifiers and internet activity, to run, protect and send email from this site.
• Scheduling and meeting tools Zoom: identifiers, to run booked sessions.
• Professional advisers and authorities, when the law requires it or to protect our rights.

Selling and sharing. We do not sell or share personal information, as those terms are defined in California law, and have not done so in the last 12 months.

Cookies and similar technologies

Cookies are small files a website stores in your browser. We group the ones on this site by purpose. Names ending in * have extra characters added by the site.

Strictly necessary (always on; the site does not work without them):

• wordpress_test_cookie: WordPress. Checks your browser accepts cookies. Session.
• wordpress_*, wordpress_sec_*, wordpress_logged_in_*: WordPress. Keep you logged in, only if you have an account. Session or 14 days.
• wp-settings-*, wp-settings-time-*: WordPress. Remember screen settings for logged-in users. 1 year.
• comment_author_*, comment_author_email_*, comment_author_url_*: WordPress. Remember your details if you leave a comment. 1 year.
• wp-postpass_*: WordPress. Remembers the password for a protected page. 10 days.
• wfwaf-authcookie-*, wf_loginalerted_*, wfCBLBypass: Wordfence security. Protect the site and logins from attacks. Up to 12 months.
• wp_woocommerce_session_*, woocommerce_cart_hash, woocommerce_items_in_cart, store_notice*: WooCommerce store. Keep your cart and store notices working. Session to 2 days.
• pmpro cookies: PMPRO Membership cookies allow us to keep members logged in to member areas.

Functional (remember your choices):

• woocommerce_recently_viewed: WooCommerce. Shows products you viewed recently. Session.
• Session storage "rco_ref" (not a cookie): RationalCo Offers. Remembers a referral code from the link you used so it can be filled in on the order form. Cleared when you close the browser tab.

Analytics (help us understand how the site is used):

• sbjs_migrations, sbjs_current_add, sbjs_first_add, sbjs_current, sbjs_first, sbjs_udata, sbjs_session: WooCommerce order attribution. Record which source (search, ad, referral) brought you to the store. Session to 6 months.
• _ga, _ga_*: Google Analytics. Distinguish visitors and sessions. Up to 2 years.

Advertising:

• _gcl_au, _gcl_aw: Google Ads. Measure which ad clicks lead to orders. 90 days.
• IDE, test_cookie (on doubleclick.net): Google. Ad measurement and targeting. Up to 13 months.
• _fbp, fr: Meta (Facebook). Measure and target ads. 90 days.

On payment pages: when you pay, you go to Stripe's or PayPal's own secure page, which sets its own cookies (for example Stripe's __stripe_mid and __stripe_sid for fraud prevention). Their privacy policies apply there.

Your choices: you can block or delete cookies in your browser settings. Blocking strictly necessary cookies may stop parts of the site, such as checkout or login, from working.

Do Not Track and Global Privacy Control

Your browser may send a "Do Not Track" signal. There is no common standard for it, so this site does not change its behavior when it receives one.

Because we do not sell or share personal information, there is nothing for a Global Privacy Control signal to switch off.

How long we keep it

• Orders, payments and agreed terms: 7 years after the order, for accounting and tax law.
• Emails and messages: up to 3 years after our last contact, unless you ask us to delete them sooner.
• Site activity logs and security records: up to 90 days.
• Cookies: for the times listed above.

After that, we delete the information or make it anonymous.

Your California privacy rights

If you live in California, you have the right to:

• Know what personal information we have collected about you, where it came from, why we collected it and who we disclosed it to, and get a copy of it.
• Delete the personal information we collected from you, with some legal exceptions (such as records we must keep for tax).
• Correct personal information that is inaccurate.
• Opt out of the sale or sharing of your personal information.
• Limit the use of sensitive personal information. We do not collect it, so there is nothing to limit.
• Not be discriminated against for using any of these rights. We will not deny you service, charge you a different price or give you a different quality of service because you made a request.

How to make a request: Send us an email at the contract address above with the subject "Privacy request" and tell us which of our sites you are using and which right you are relying on.

Verification: to protect you, we confirm your identity by matching the details you give us (such as the email address and an order date) with our records. We will only use those details to verify your request.

Authorized agents: someone you authorize may make a request for you. We will ask for your signed permission and may ask you to confirm your identity with us directly.

Timing: we confirm receipt within 10 business days and respond within 45 days. If we need more time (up to 45 more days), we will tell you why. Requests to know cover the 12 months before your request unless you ask for a longer period. Requests are free, up to twice in any 12 months.

Shine the Light: California Civil Code section 1798.83 lets California residents ask whether we disclosed personal information to third parties for their own direct marketing. We do not do this.

Last 12 months: the categories, sources, purposes and recipients listed in this policy describe what we collected and disclosed in the 12 months before the date at the top of this page.

Children

This site and our services are for businesses and adults. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has given us information, contact us and we will delete it.

Security

We protect your information with encrypted connections (https), security software, limited staff access and payment processors that meet card industry security standards. No method is perfectly secure, so we cannot guarantee absolute security.

Visitors outside the United States

Our business and service providers are in the United States. If you visit from another country, your information is processed in the United States.

Changes to this policy

We review this policy at least once a year. When we change it, we update the date at the top of this page, and if a change is significant we will tell customers by email or with a notice on this site before it takes effect.

Contact us

Email nancy@nobetterfriend.com.