Last updated August 2026
Short version: we collect your name, email, and phone number so we can deliver what you bought and email you about clinical training. We don't sell your data. You can leave at any time.
When you fill in the form: first name, last name, email address, phone number.
When you buy: Stripe collects and processes your payment details. We never see or store your card number — we receive only the outcome of the payment, the amount, and the billing name and email attached to it.
Automatically: standard server logs and aggregate analytics — pages viewed, approximate region, referring site, browser type.
To deliver your purchase, to unlock the community access included with it, to provide support, and to send you clinical training emails. The lawful basis is performance of a contract for the first three, and consent for marketing email.
We use a small number of processors, each for a specific purpose:
We do not sell your personal information, and we do not share it with advertisers or data brokers.
Buying the book opts you into our clinical training emails. Every one has an unsubscribe link and it works immediately. Unsubscribing does not affect your access to anything you bought.
So we can reach you if there's a problem delivering your purchase, and — if you've opted in — for occasional messages about training. We don't sell it, and we don't cold-call people who bought a book.
Customer records for as long as you have access to what you bought, plus the period required for tax and accounting purposes. Marketing contacts until you unsubscribe or ask us to delete you.
You can ask us to show you what we hold, correct it, delete it, or stop emailing you. Email support@performancerehab.co and we'll action it within thirty days. If you're in the EU/UK or California, you have additional statutory rights — including the right to object to processing and, in California, the right to know and to delete — and the same address is the way to exercise them.
This site uses only what it needs to function and to count visits in aggregate. Stripe sets its own cookies on the checkout page it hosts, which are necessary for fraud prevention.
Traffic is encrypted in transit. Download links are cryptographically signed so they can't be guessed, and they stop working if the order is refunded. No system is perfectly secure, but we don't hold card data, which removes the thing most worth stealing.
This site is for licensed and student clinicians and is not directed to anyone under 16. We don't knowingly collect their information.
We'll update the date above when this changes. Material changes affecting how we use your data will be emailed to you.
Note for the site owner: this is a working draft covering the processors this site actually uses. It is not legal advice. Have a lawyer review it against your obligations — GDPR and CCPA in particular — and add your registered business name and address before launch.