Skip to content

Privacy Policy

Effective Date: August 15, 2026 

Welcome to Self-Regulation Lab. This Privacy Policy governs the data collection, processing, and privacy practices of Self-Regulation Innovative Technologies OÜ (“we,” “our,” or “us”). We are committed to protecting the personal data of our website visitors, customers, and clients (“you”) in full compliance with the European Union General Data Protection Regulation (GDPR). 

  1. Data Controller Details

For the purposes of the GDPR, the legal entity responsible for your data processing is: 

  • Company Name: Self-Regulation Innovative Technologies OÜ 
  • Estonian Registry Code: 17551738 
  • Official Address: Narva mnt 5, Kesklinna linnaosa, Tallinn, Harju maakond, 10117, Estonia 
  • Contact Email: contact@selfregulationlab.com 
  1. What Personal Data We Collect

We collect and process the following categories of information when you interact with our storefront at https://selfregulationlab.com: 

  • Identity & Contact Data: Your full name, email address, billing address, and phone number when you purchase a product, sign up for free resources, or book a consultation. 
  • Financial & Transaction Data: Your card details or digital wallet parameters used during checkout. Note: Our third-party payment gateways (Stripe and PayPal) securely handle all financial transaction processing. We never store raw credit card numbers on our local servers. 
  • Consultation & Interaction Data: Notes, schedule choices, or responses you share when booking or participating in our non-clinical self-regulation coaching and worksheet assistance sessions. 
  • Technical & Usage Data: Your IP address, browser type, device logs, and interaction behavior collected automatically via essential cookies when navigating our site. 
  1. How and Why We Use Your Data (Legal Basis)

Under the GDPR, we only process your data when we have a valid legal basis to do so: 

  • Performance of a Contract: To process payment, generate instant file downloads for The All-in-one Headache Tracker Workbook, deliver free educational materials, or fulfill scheduled consultation sessions. 
  • Legitimate Interests: To improve our website performance, secure our checkout system from automated payment fraud via Stripe Radar, and maintain internal accounting files. 
  • Consent: To send you promotional updates or product newsletters if you explicitly choose to subscribe via our email capture forms. You can opt-out at any time. 
  1. Third-Party Disclosures & Affiliate Links

We do not sell or trade your data. To operate our digital business pipeline efficiently, we share specific information with verified, secure external partners: 

  • Payment Infrastructure: Core transaction information is securely routed through Stripe Europe and PayPal to complete customer checkouts. 
  • Affiliate Marketing Links: Our website features promotional affiliate links for home-use (non-medical-grade) biofeedback and neurofeedback equipment. Clicking an affiliate link redirects you to our external partner websites. These third-party sites maintain their own distinct privacy rules and tracking cookies. We do not transmit your local personal profile data to these affiliate networks. 
  • Operational Service Providers: This includes our hosting network, corporate accounting engines (1Office Tallinn framework), and secure video tools used for consultation sessions. 
  1. International Cross-Border Data Transfers

As a business operated by an international director, our corporate management team in Armenia may securely access and manage your data outside the European Economic Area (EEA). We utilize strict operational guidelines and standard contractual clauses approved by the European Commission to ensure your personal profiles receive an identical, high-level layer of privacy protection worldwide. 

  1. Data Retention Rules

We keep your personal information only as long as necessary to complete your transactions, fulfill our coaching obligations, or comply with Estonian corporate tax laws (which require transaction bookkeeping archives to be maintained for up to 7 years). 

  1. Your Legal Privacy Rights

As an individual under EU GDPR jurisdiction, you hold the following absolute rights regarding your personal profiles: 

  • The right to view and copy the personal information we hold about you. 
  • The right to update or correct inaccurate details. 
  • The right to command the total deletion of your personal data from our servers (where it does not conflict with legal bookkeeping laws). 
  • The right to withdraw your marketing consent instantly. 

To exercise any of these security rights, please contact our compliance desk directly at: contact@selfregulationlab.com. 

  1. Updates to this Policy

We may periodically update this document to reflect new website features, payment hooks, or shifting privacy laws. We will post any modifications publicly on this page with an updated effective date.