Today’s Cure

Privacy Notice — Today’s Cure

Last updated: [[DATE OF PUBLICATION]]

This notice explains, in plain English, what personal information todayscure.com collects, why, and what you can do about it.

Who we are

Today’s Cure is the home of Mind Cures: Daily Thoughts to Enrich Your Life by Kemal Brown. We are the “data controller” for the information described here.

[[OPERATOR LEGAL NAME — KEMAL MUST CONFIRM]]
166 Geary St STE 1500, San Francisco, CA 94108, USA

Privacy questions: mind@todayscure.com

What we collect

1. When you sign up for the daily email

• Your email address (and your first name, if you give it).
• The date and time you signed up and the form you used, so we can show you agreed.
• Whether you open emails or click links in them, so we can improve them and remove inactive addresses.

2. When you browse the site

• With your consent (see “Cookies and analytics” below), we use analytics tools (Google Analytics 4 and Microsoft Clarity) to understand how visitors use the site, and advertising tools (the Meta Pixel and TikTok Pixel) to measure our ads. This can include pages viewed, clicks, scrolling, time on page, device and browser type, approximate location (country or city, from your IP address), how you arrived, and actions such as signing up or clicking a link to buy the book.
• Clarity may create recordings of how pages are used (mouse movements, clicks and scrolling). Anything typed into forms, including your email address, is hidden and not recorded, and other on-page text is masked.
• We do not use this information to identify you by name. Meta and TikTok may link it to your Facebook, Instagram or TikTok account and use it for advertising; see “Cookies and analytics” and “Your US state privacy choices” below.

3. When you click a buy link

• Links to buy the book take you to Amazon. Amazon’s own privacy notice applies once you are there.

Cookies and analytics

When you first visit, a banner asks whether you accept optional cookies and similar technologies (such as pixels). Nothing below loads until you choose, wherever you are, and closing the banner counts as “no”. You can change your mind at any time using “Cookie settings” in the site footer; turning a category off stops it straight away and deletes the cookies it set on this site. Your choice itself is saved in your browser’s local storage (not sent to us or anyone else) so we don’t ask on every page. It is needed to respect your choice, so it doesn’t need consent. We ask again after 12 months, or sooner if we add a new tool.

If your browser sends a Global Privacy Control (GPC) signal, we treat it as a “no” to Advertising.

Analytics (off unless you accept)

• Google Analytics 4 (Google LLC / Google Ireland Ltd). Collects pages viewed, how you arrived, time on page, device and browser type, approximate location (country or city, from your IP address, which Google says Analytics does not log or store), and events such as signing up or clicking a buy link. Google signals and ad personalisation are switched off. Google keeps visitor-level data for 14 months, then deletes it; summary reports that don’t identify anyone may be kept longer. Opt out: “Cookie settings” › Analytics off, or the Google Analytics opt-out add-on. Google’s privacy policy.
• Microsoft Clarity (Microsoft Corporation). Collects clicks, scrolling, mouse movement and pages viewed, and makes recordings and heatmaps of how pages are used. Anything typed into forms, including your email address, is hidden and other on-page text is masked. Recordings are kept for 30 days; heatmaps, click data and any sessions we save are kept for up to 9 months. Opt out: “Cookie settings” › Analytics off. Microsoft Privacy Statement.

Advertising (off unless you accept)

• Meta Pixel (Meta Platforms, Inc. / Meta Platforms Ireland Ltd). Tells us whether visits from our Facebook and Instagram ads lead to a sign-up or a click to buy the book, and helps Meta show our ads to people likely to be interested. Collects pages viewed, those actions, browser and device information, your IP address and a cookie identifier; if you are logged in to Facebook or Instagram, Meta may link this to your account and use it to show you ads, including ads from other businesses, and to improve its own services. We never send Meta your email address. For visitors in the EU/EEA, the UK and Switzerland, we and Meta are joint controllers for collecting this data and sending it to Meta; Meta is responsible for what it does with it afterwards (Meta’s Controller Addendum information). Meta says it may keep this data for up to two years. Opt out: “Cookie settings” › Advertising off, Meta’s ad preferences, and the industry opt-out pages at aboutads.info/choices (US) and youronlinechoices.eu (EU). Meta Privacy Policy.
• TikTok Pixel (TikTok Inc. / TikTok Technology Ltd). The same purpose for our TikTok ads: pages viewed, sign-ups and buy-link clicks, browser and device information, IP address and a cookie identifier. TikTok may use this to show you ads, including ads from other businesses. We never send TikTok your email address. For visitors in the EU/EEA, the UK and Switzerland, we and TikTok are joint controllers for collecting this data and sending it to TikTok; TikTok is responsible for what it does with it afterwards. Opt out: “Cookie settings” › Advertising off, and the ad settings in your TikTok account. TikTok Privacy Policy · TikTok Cookie Policy.

Search

• Google Search Console (Google). Shows us how the site appears in Google Search (searches, clicks and rankings, in aggregate). It adds no cookies or code to the pages; it only needs a verification file on the site.

Cookies these tools set (only after you accept; names and lifetimes are set by each provider and can change)

Why we use it, and our legal basis

We don’t make automated decisions about you that have legal or similarly significant effects.

Who we share it with

We use trusted service providers who process data for us under contract:

• Kit (ConvertKit) — sends our emails and stores the subscriber list.
• Google (Google Analytics 4) — website analytics, if you accept Analytics.
• Microsoft Corporation (Microsoft Clarity) — website analytics, if you accept Analytics.
• Netlify — hosts the site and keeps standard server logs.

If you accept Advertising, Meta and TikTok also receive information about your visit through their pixels. They are not just our service providers: they can also use it for their own purposes, including showing you ads (see “Cookies and analytics”).

We may also disclose information if the law requires it. We never sell or rent your personal information for money, and we never sell or share our email list. Letting Meta and TikTok collect data through their pixels for advertising may count as “selling”, “sharing” or “targeted advertising” under some US state laws; see “Your US state privacy choices”.

International transfers

Our providers (Kit, Netlify, Google, Microsoft, Meta and TikTok) are mainly based in the United States or operate worldwide, so your information may be processed outside Jamaica, the EU/EEA, the UK or Switzerland, including in the United States and other countries where those companies operate. Where the law requires it, including Jamaica’s Data Protection Act 2020, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or the EU–US / UK–US Data Privacy Framework where the provider is certified.

How long we keep it

• Email subscribers: until you unsubscribe. After that we keep only your email address on a “do not contact” list, so we never email you again by mistake.
• Analytics data (Microsoft Clarity): session recordings are kept for 30 days; heatmaps, click data and any sessions we specifically save are kept for up to 9 months, then deleted by Microsoft.
• Analytics data (Google Analytics 4): visitor-level data is kept for 14 months, then deleted by Google. Summary reports that don’t identify anyone may be kept longer.
• Advertising data (Meta and TikTok): kept by Meta and TikTok under their own policies (Meta says up to two years). Our ad reports show only totals.
• Your cookie choice: 12 months in your browser, then we ask again.

Your rights

Wherever you live, you can ask us to:

• Access — tell you what information we hold about you and give you a copy.
• Correct — fix information that is wrong or incomplete.
• Delete — erase your information.
• Stop direct marketing — you can unsubscribe at any time using the link at the bottom of every email, or by writing to us. We’ll act on it promptly, and in any case within 10 business days.
• Withdraw consent — for analytics and advertising, using the “Cookie settings” link in the site footer.

If you are in the EU/EEA, the UK or Switzerland, you also have the rights to restrict or object to processing and to data portability.

To use any of these rights, email mind@todayscure.com. We may need to confirm your identity first. We will respond within 30 days.

Your US state privacy choices

Some US state privacy laws (for example in California, Colorado, Connecticut, Virginia and Oregon) give residents the right to opt out of the “sale” or “sharing” of personal information, or its use for “targeted advertising”. Our only activity that may count is the Meta and TikTok pixels described above. They are off unless you accept Advertising, and you can opt out at any time by turning Advertising off in “Cookie settings”. We also honour Global Privacy Control (GPC) signals as an opt-out. We don’t knowingly sell or share the personal information of anyone under 16. You may also email mind@todayscure.com to use these or your other rights; we won’t treat you differently for doing so.

Complaints

Please contact us first so we can try to put things right. You also have the right to complain to a regulator:

• Jamaica: the Office of the Information Commissioner (OIC) — oic.gov.jm, including its online data subject complaint form.
• EU/EEA: your local data protection authority.
• UK: the Information Commissioner’s Office — ico.org.uk.
• Switzerland: the Federal Data Protection and Information Commissioner (FDPIC) — edoeb.admin.ch.

About our emails

Every email we send identifies who it’s from, carries our postal address (166 Geary St STE 1500, San Francisco, CA 94108), and includes a working one-click unsubscribe link. We only email people who signed up.

Children

This site and the Today’s Cure email are intended for adults and are not aimed at anyone under 18. We don’t knowingly collect information from anyone under 18; if you believe we have, email mind@todayscure.com and we will delete it.

Security

We use reputable providers, encrypted connections (HTTPS) and limited access to protect your information. No system is perfectly secure, but we will tell you and the regulator if a breach affects you where the law requires it.

Changes

If we change this notice, we’ll update the date at the top. If a change is significant, we’ll tell subscribers by email.