The Master Codex

DATA CONTROLLER

The data controller responsible for this website is:

Kerstin Bachler
Austria

VAT ID (UID-Nr.): ATU80440248

All enquiries relating to this policy should be submitted through our secure contact form: www.themastercodex.com/contact.

WHAT WE COLLECT

Information you give us directly — when you register for an offer or apply for a private session, we collect what the relevant form asks for: name, email address, phone/WhatsApp number, country/location, business name and role, website and social links, and your written answers to application questions (what brought you to us, what you're working through, what you want to leave with). You choose what to share; only fields marked required must be completed.

Payment information — card payments are handled entirely by SumUp, our payment processor. We never see, receive, or store your card number, expiry date, or CVC. We do store the outcome of a payment (confirmed / pending), the amount, currency, and a SumUp checkout reference, so we can confirm your order and deliver access.

Technical/analytics information — see the Cookies section below; this is also documented in full in our Legal Notice.

HOW WE USE YOUR DATA, AND WHY WE'RE ALLOWED TO

To fulfil your order (Art. 6(1)(b) GDPR — necessary to perform our contract with you): processing your registration, confirming payment, granting access to what you purchased, sending delivery and confirmation emails, and — for private sessions — coordinating scheduling.

To respond to you (Art. 6(1)(b)/(f)): when you contact us with a question, request, or support issue.

For site analytics (Art. 6(1)(a) — your consent): see Cookies below.

To meet legal obligations (Art. 6(1)(c)): for example, retaining records required under Austrian commercial and tax law.

WHO WE SHARE DATA WITH

We use the following processors to run this business. None of them are permitted to use your data for their own purposes — they process it only on our instructions, to provide the service listed.

• SumUp — payment processing. SumUp receives your payment details directly; we do not.
• Supabase — our database and backend hosting. Registration, order, and access-token records are stored here.
• Airtable — an internal order-records mirror, used for our own business operations (fulfilment, support).
• Brevo — sends transactional emails (confirmations, access links, delivery emails) on our behalf.
• Microsoft (Clarity) — website analytics, only if you consent. Full detail in our Legal Notice.

We do not sell your personal data, and we do not share it with anyone for their own marketing purposes.

INTERNATIONAL TRANSFERS

Some of the processors above may process data outside the European Economic Area (for example, in the United States). Where this happens, we rely on the safeguards those providers state in their own documentation — such as the EU-U.S. Data Privacy Framework or standard contractual clauses. See each provider's own privacy documentation for their current position.

HOW LONG WE KEEP YOUR DATA

We keep your data for as long as needed to provide what you purchased, to meet our own legal and tax record-keeping obligations, and to resolve any dispute or support request relating to your order. Where you have an ongoing right to request access, replays, or support tied to a product you purchased, we retain records for at least the duration of that access.

YOUR RIGHTS

Under the GDPR, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data, where we are not required to keep it
• Request restriction of, or object to, certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time, for anything based on consent (for example, analytics cookies)
• Lodge a complaint with the Austrian data protection authority (Datenschutzbehörde, dsb.gv.at), or your own country's equivalent

To exercise any of these, contact us at www.themastercodex.com/contact.

PURCHASES, REFUNDS & WITHDRAWAL RIGHTS

Policy differs by product type:

• The book, workbook, and journal (instant digital download/reader access): no refund. By completing this purchase you explicitly request immediate access and acknowledge that you lose the statutory 14-day right of withdrawal once that access begins, as confirmed by the checkbox shown at checkout.
• The Foundations Course: you may withdraw within 14 days of your order, without giving a reason, for a full refund — contact us at www.themastercodex.com/contact within that period.
• Network / membership access (e.g. academy-access): a 14-day cooling-off period applies from the date of purchase.
• Private 1:1 sessions (Purpose Session, Mentoring Journey, and other private bookings): these are reserved for a specific date and time, and under Art. 16(l) of the EU Consumer Rights Directive are not subject to the standard 14-day withdrawal right. Payment is confirmed on booking; if a scheduling conflict arises, the session is rescheduled rather than refunded.

COOKIES

This site uses only one non-essential cookie category: analytics, via Microsoft Clarity, loaded only with your consent. Full detail — what's collected, legal basis, international transfer, and how to withdraw consent — is documented in our Legal Notice.

CHANGES TO THIS POLICY

We may update this policy as our practices or the products we offer change. The date below reflects the most recent revision.

LAST UPDATED

Last updated: 16 August 2026