Last updated: 9 June 2025

1. Introduction

EngineerMyHealth.com (“Site“, “we“, “our” or “us“) is an online platform that shares evidence‑based insights, tools and community resources that help engineers optimise their physical and mental wellbeing. We respect your privacy and are committed to protecting any personal data that you share with us. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you visit the Site, subscribe to our newsletter, purchase products or otherwise interact with us.

By using the Site, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described here, please do not use the Site or provide any personal data.

2. Who We Are (Data Controller)

The data controller responsible for your personal data is:

EngineerMyHealth (Health Coaching Trading Name of EfficientGrids OÜ)
Sepapaja 6, Tallinn 15551, Estonia
Registry code: 16739285

Efficient Grids OÜ operates EngineerMyHealth.com from its establishment in Estonia/Poland and processes personal data in accordance with the EU General Data Protection Regulation (GDPR) and UK GDPR. For Californian users, we also adhere to the California Consumer Privacy Act (CCPA), as amended by the CPRA.

3. Scope of This Policy

This Policy applies to personal data collected through:

• The website EngineerMyHealth.com, its sub‑domains and associated mobile versions;

• Our newsletters, webinars, surveys and events;

• Social‑media pages that we control;

• Any other online or offline interaction where this Policy is referenced.

It does not apply to third‑party websites, services or applications that we do not own or control, even if they link to or from our Site.

4. Types of Data We Collect

4.1. Information You Provide Directly

4.2. Information Collected Automatically

When you visit the Site we automatically collect certain information from your device via cookies, pixel tags, local storage and similar technologies:

• Technical data: IP address, browser type and version, operating system, device type, unique device identifiers;

• Usage data: pages viewed, time on page, referring/exit URLs, clicks, scrolls, search queries;

• Approximate location data derived from your IP (country, city, time zone).

4.3. Information from Third Parties

We may receive information about you from:

• Social‑media platforms (e.g. when you comment or like our content);

• Analytics providers (e.g. Google Analytics 4, Plausible, Matomo);

• Payment processors (e.g. Stripe, PayPal) that confirm a transaction;

• Marketing partners or public databases that lawfully share data with us.

5. Legal Bases for Processing (GDPR Art. 6)

We only process personal data when we have a lawful basis. These include:

1. Consent: You have given clear consent (e.g. to receive our newsletter or place optional cookies).

2. Contract: Processing is necessary to perform a contract with you (e.g. to deliver a paid course).

3. Legal obligation: Processing is required to comply with relevant laws (e.g. tax and accounting rules).

4. Legitimate interests: Processing is necessary for our legitimate interests (e.g. analytics, fraud prevention) and these interests are not overridden by your rights.

Where we rely on consent, you may withdraw it at any time (see Section 11).

6. How We Use Your Data

We use personal data to:

1. Provide and operate the Site;

2. Personalise content, recommendations and community features;

3. Process payments and deliver products or services you purchase;

4. Send administrative information, such as order confirmations and updates;

5. Send marketing communications (if you have opted‑in), including newsletters, special offers and event invitations;

6. Conduct research and analytics to understand how our services are used and improve them;

7. Detect, prevent and address technical issues, fraud and abuse;

8. Comply with legal obligations and enforce our Terms of Service.

7. Cookies and Similar Technologies

We use first‑party and third‑party cookies to:

• Remember your preferences (language, cookie consent);

• Keep you logged in between sessions;

• Measure Site usage and performance;

• Serve relevant content and advertising.

You can control cookies through your browser settings and our Cookie Banner. Detailed information is provided in our separate Cookie Notice.

8. Sharing and Disclosure of Your Data

We only disclose personal data when necessary for the purposes set out in this Policy:

• Service Providers: IT hosting, analytics, email delivery, payment processing, customer‑support tools.

• Professional Advisers: lawyers, accountants, auditors under confidentiality obligations.

• Legal Authorities: when required by court order, subpoena or to meet other legal obligations.

• Business Transfers: in connection with a merger, acquisition or asset sale (your data will remain subject to this Policy or an equivalent policy).

We never sell or rent your personal data.

9. International Data Transfers

Your data may be transferred to—and processed in—countries outside the European Economic Area (“EEA“), including the United States. Whenever we transfer data internationally we:

• Use legally approved mechanisms (e.g. Standard Contractual Clauses);

• Take appropriate safeguards (encryption, limited access) to protect your data.

10. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting or reporting requirements. Typical retention periods:

• Account data: while your account is active and up to 6 years after closure (for tax and audit);

• Marketing consent records: 3 years from last interaction;

• Analytics data: 26 months or shorter, as configured in our analytics platform.

We periodically review our retention schedules and securely delete or anonymise data that is no longer required.

11. Your Rights

Under GDPR/UK GDPR you have the right to:

1. Access the personal data we hold about you;

2. Rectify inaccurate or incomplete data;

3. Erase your data (“right to be forgotten”);

4. Restrict or object to certain processing;

5. Data portability (receive a copy in a structured, machine‑readable format);

6. Withdraw consent at any time where processing is based on consent;

7. Lodge a complaint with your local supervisory authority (e.g. the Estonian Data Protection Inspectorate or the UK ICO).

Residents of California have additional rights under the CCPA/CPRA, including the right to opt‑out of the sale or sharing of personal information. We honour these rights for all users by design.

To exercise any rights, use the contact form below. We may need to verify your identity before responding.

12. Security

We implement technical and organisational measures to protect personal data, including:

• TLS/HTTPS encryption in transit;

• Server‑side encryption at rest for critical data fields;

• Zero‑trust access controls and MFA for staff accounts;

• Regular security audits and penetration tests;

• Staff training on data‑protection best practices.

Despite our efforts, no online service is 100 % secure. We encourage you to use strong and unique passwords and to exercise caution when sharing information online.

13. Children’s Privacy

EngineerMyHealth.com is not directed at children under 16 years of age, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us immediately so we can delete it.

14. Links to Other Websites

Our Site may contain links to external sites. We have no control over—and are not responsible for—the privacy practices of such third parties. We encourage you to read their privacy policies.

15. Changes to This Policy

We may update this Policy occasionally to reflect legal, technical or business changes. When we do, we will revise the “Last updated” date and, if changes are material, provide prominent notice (e.g. banner or email). Continued use of the Site after an update constitutes acceptance of the revised Policy.

16. Contact Us

If you have any questions about this Privacy Policy or our data‑protection practices, please contact us using the web form below.

We aim to respond to privacy‑related enquiries within 30 days.