Privacy Policy
PRIVACY POLICY
This Privacy Policy is compartmentalized: Section B states what we collect and why; Section C addresses United States law (including the CCPA/CPRA); Section D addresses United Kingdom and European Union law (UK GDPR and EU GDPR); Section E is a standalone Electronic Signatures & Records notice (E-Sign Act / UETA); and Section F sets out general compliance commitments that apply across all regimes. Each section is intended to be read on its own.
A. Who We Are
The data controller / business responsible for personal information collected through https://earnheart.online/ is Pantheon Consulting Group (with its affiliated Earnheart entities described in Part I). Contact: admin@earnheart.online.
B. Information We Collect & Why
We collect the following categories, each tied to a specific purpose:
Contact / inquiry form data — name, email address, and message content, used to respond to your inquiry and maintain correspondence.
Newsletter / email-list data — email address (and optional name), used to send updates and marketing you have requested; you may unsubscribe at any time.
Account data — registration details, login credentials, and profile information, used to create and administer your account and deliver licensed content or services.
Payment & billing data — transaction details processed for licensing fees, merchandise, and services. Card and bank data are handled by PCI-DSS compliant payment processors; we do not store full payment-card numbers on our own servers.
Analytics & cookie data — device, browser, IP address, pages visited, and similar usage data collected via cookies and analytics tools to operate, secure, measure, and improve the Site (see Section F for cookie detail and choices).
We do not knowingly collect special-category / sensitive data through the Site unless you volunteer it, and we do not sell personal information for money. Any "sharing" for cross-context behavioral advertising is addressed in Section C.
C. United States Notice (CCPA / CPRA & General U.S. Law)
This section applies to residents of the United States and, in particular, gives effect to the California Consumer Privacy Act as amended by the California Privacy Rights Act (Cal. Civ. Code § 1798.100 et seq.). Comparable rights under other state statutes (e.g., Virginia, Colorado, Connecticut, Utah) are honored where applicable.
Your rights
Right to know / access the categories and specific pieces of personal information collected.
Right to delete personal information, subject to statutory exceptions. Right to correct inaccurate personal information.
Right to opt out of any "sale" or "sharing" of personal information. Right to limit use of sensitive personal information.
Right to non-discrimination for exercising any of these rights.
To exercise these rights, contact admin@earnheart.online. We will verify your request and respond within the statutory period (generally 45 days under the CCPA/CPRA, extendable once). An authorized agent may submit a request with proof of authorization. We honor recognized opt-out preference signals (such as Global Privacy Control) where required.
D. United Kingdom & European Union Notice (UK GDPR / EU GDPR)
This section applies where the UK GDPR (as incorporated by the Data Protection Act 2018) or the EU General Data Protection Regulation (Regulation (EU) 2016/679) governs the processing of your personal data, including when you access the Site from the United Kingdom or the European Economic Area.
Lawful bases for processing (Article 6)
Consent — for newsletter subscription and non-essential cookies. Performance of a contract — to administer accounts, process payments, and deliver licensed services.
Legitimate interests — to secure, operate, and improve the Site, balanced against your rights.
Legal obligation — to comply with tax, accounting, and regulatory duties.
Your data-subject rights (Articles 12–22)
You have the rights of access, rectification, erasure ("right to be forgotten"), restriction, data portability, objection, and the right not to be subject to solely automated decision making producing legal or similarly significant effects. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing.
International transfers, retention & complaints
Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. We retain personal data only as long as necessary for the purposes described or as required by law. You may lodge a complaint with your supervisory authority — in the UK, the Information Commissioner's Office (ICO); in the EEA, your national Data Protection Authority.
E. Electronic Signatures & Records Notice (E-Sign Act / UETA)
This standalone notice governs your consent to transact electronically and is provided under the federal Electronic Signatures in Global and National Commerce Act (E-Sign Act, 15 U.S.C. § 7001 et seq.) and the Uniform Electronic Transactions Act (UETA) as adopted by the states.
Consent to electronic records. By using the Site, creating an account, subscribing, or completing a transaction, you agree that agreements, notices, disclosures, and records may be provided electronically and that an electronic signature has the same legal force as a handwritten one.
Hardware/software requirements. To access and retain electronic records you need a current web browser, internet access, and the ability to view PDF documents and save or print them.
Right to paper copies and to withdraw consent. You may request a paper copy of any record and may withdraw consent to electronic delivery by contacting the address of record; withdrawal applies prospectively. Attribution & integrity. Electronic records are attributed and their integrity maintained consistent with the E-Sign Act and UETA. In Black's Law Dictionary, a "signature" is any mark or sign made with intent to authenticate an instrument; an electronic signature satisfies this where the signer intends to adopt or accept the record.
F. General Compliance (All Regimes)
Cookies & analytics choices
We use strictly necessary cookies (always on) and, with consent where required, analytics and preference cookies. You can manage cookies through your browser settings and, where presented, our cookie banner. Disabling some cookies may affect Site functionality.
Data security
We apply administrative, technical, and physical safeguards appropriate to the risk — including encryption in transit, access controls, and reliance on PCI-DSS-compliant processors for payments. No method of transmission or storage is perfectly secure; we will notify affected users and authorities of a breach where the law requires.
Children
The Site is not directed to children under 13 (or under 16 in the EEA/UK), and we do not knowingly collect their personal data. If we learn we have done so, we will delete it.
Retention & your contact point
We retain personal information only as long as necessary for the purposes described or to meet legal, tax, and accounting obligations, after which it is deleted or anonymized. For any privacy request, question, or rights exercise under any section above, contact admin@earnheart.online. We will route your request to the responsible entity and respond within the period the applicable law requires.
Changes to this Policy
We may update this Privacy Policy. The controlling version is the one posted on the Site bearing the most recent effective date; material changes will be signaled on the Site.
End of document. Published by Pantheon Consulting Group for https://earnheart.online/.
Effective May 20, 2026 — Version 1.0.