Legal

Privacy Policy.

We collect only what we need. We do not sell your data. You can request access, correction, or deletion at any time.

Effective Date: February 13, 2026 | Last Updated: April 26, 2026

Entity: Multiple Natures International, operated by Steven Rudolph | Contact: support@multiplenatures.com

Contents

  1. Who We Are
  2. What We Collect
  3. How We Use Your Information
  4. Legal Bases for Processing (GDPR)
  5. AI-Powered Tools and Your Data
  6. Cookies and Tracking
  7. Data Sharing and Third Parties
  8. International Data Transfers
  9. Data Retention
  10. Security
  11. Your Rights
  12. Children's Privacy
  13. Changes to This Policy
  14. Contact

1. Who We Are

Multiple Natures International is operated by Steven Rudolph. We publish books, courses, diagnostic tools, and practitioner resources under the Multiple Natures® framework. For GDPR purposes, Steven Rudolph is the data controller. Contact: support@multiplenatures.com.

2. What We Collect

2.1 Information You Provide Directly

Data Type When Collected Purpose
Name and email Account creation, purchases, newsletter signup Deliver products, communicate
Payment information Purchases Process transactions (handled by payment processor; we do not store card details)
Situation descriptions and text inputs AI diagnostic tools Generate diagnostic outputs
Professional information Practitioner license applications Evaluate and manage licensing
Communications Emails, support requests Respond to inquiries

2.2 Information Collected Automatically

Data Type How Collected Purpose
IP address Server logs Security, abuse prevention
Browser type and version HTTP headers Ensure compatibility
Pages visited and time spent Analytics Understand usage patterns
Referring URL HTTP headers Understand how users find us
Device type and OS HTTP headers Ensure compatibility

2.3 Third-Party Services

If you authenticate through Google or similar, we receive limited profile info (name, email) as authorized during authentication. We access only permissions you grant.

2.4 What We Do Not Collect

We do not collect sensitive personal data, financial card details, or purchase data from brokers.

3. How We Use Your Information

  • Deliver products and services
  • Process payments
  • Communicate with you (purchase confirmations, support, service updates)
  • Send marketing (opt-in only; unsubscribe any time)
  • Improve services via aggregate analytics
  • Ensure security
  • Comply with legal obligations
  • Manage practitioner licensing

AI diagnostic outputs are advisory only. No employment, credit, insurance, or other consequential decisions are made automatically.

EEA/UK/Switzerland:

  • Contract performance (Art. 6(1)(b))
  • Legitimate interests (Art. 6(1)(f))
  • Consent (Art. 6(1)(a)) — may withdraw at any time
  • Legal obligation (Art. 6(1)(c))

5. AI-Powered Tools and Your Data

5.1 What AI Tools Process

Text inputs are processed to generate outputs; may be retained in anonymized form.

5.2 Outputs

Stored for your access; not shared with other users.

5.3 Third-Party AI Providers

We use Anthropic's Claude (Anthropic, PBC, San Francisco, USA). Inputs sent to Anthropic API for output generation only. Anthropic does not use your data to train models under commercial API terms. We do not send name/email to Anthropic unless included in free-text. Data processed in the US.

5.4 AI Training Prohibition

We do not use your personal data or diagnostic inputs to train, fine-tune, or improve AI or machine learning models.

6. Cookies and Tracking

6.1 Cookie Types

Strictly necessary (session, auth), functional (preferences), analytics (aggregate, anonymized). No advertising cookies. No advertiser sharing.

6.2 Control

Control via browser settings. EEA consent required for non-essential cookies.

7. Data Sharing and Third Parties

We do not sell, rent, or trade your data. We share only with:

  • Payment processors
  • Hosting/infrastructure (Cloudflare)
  • AI service providers (Anthropic, as described in Section 5.3)
  • Email platforms (Substack, if subscribed)
  • Legal requirements
  • Business transfers (with notice)

8. International Data Transfers

Operated from the United States and Cambodia. Infrastructure on Cloudflare global edge, primary storage in US. For EEA/UK/CH transfers: Standard Contractual Clauses or explicit consent. Contact support@multiplenatures.com for transfer safeguards.

9. Data Retention

  • Account data: active + reasonable period after closure
  • Purchase records: 7 years (tax/accounting)
  • AI inputs/outputs: active account; delete on request
  • Support emails: 3 years
  • Server logs: 90 days
  • Marketing data: until unsubscribe or deletion request

10. Security

HTTPS/HSTS, encrypted credentials, access controls, Cloudflare WAF, rate limiting, input sanitization, security monitoring, regular audits. No system is perfectly secure. Breach notification per applicable law.

11. Your Rights

11.1 GDPR (EEA/UK/Switzerland)

Access, rectification, erasure (30-day processing), restriction, portability, object, withdraw consent, lodge complaint.

11.2 CCPA (California)

Know, delete, opt-out of sale (we do not sell), non-discrimination.

11.3 DPDP Act (India)

Access, correction/erasure, grievance redressal, nominate.

11.4 How to Exercise

Email: support@multiplenatures.com. Response within 30 days or as required by law.

12. Children's Privacy

Not directed at under-16s. No knowing collection from under-16s. Contact support@multiplenatures.com if concerned.

13. Changes to This Policy

Material changes: 30 days notice via website or email. Last Updated date reflects most recent revision.

14. Contact

Email: support@multiplenatures.com

General inquiries: /contact page

EEA users: Right to lodge complaint with local supervisory authority.