Privacy Policy

This policy explains what we collect, why we collect it, who we share it with, and the rights you have over it. Written in plain English. UK GDPR and Data Protection Act 2018 apply throughout.

1. Who we are

Decodemeno is operated as a sole trader by Matthieu Lasch. We act as the data controller for the personal data described below.

Contact for any privacy question or request: hello@decodemeno.com. We aim to reply within five working days.

2. What data we collect

We try to collect the minimum needed to give you a useful Decoder report.

• Quiz answers. The 21 Greene Climacteric Scale items plus four demographic questions (age band, country, cycle status, life context).
• Contact details. Your email address, and if you buy supplements, your name and shipping address.
• Purchase data. Order amount, currency, date, country. Card details are handled by Stripe, we never see or store them.
• Email engagement. Whether you opened or clicked emails we sent (via Klaviyo).
• Analytics. Session events, pages visited and clicks. These are measured through Google Analytics 4 (loaded only after you consent) and through our own first-party event table, used to understand how the site is used and to improve it.

3. Why we collect it

• Generate your Decoder report. Your quiz answers are processed to write your personalized report across 12 detailed sections.
• Deliver it to you. By email and on the website after purchase.
• Customer care. Reply to your questions, process refunds, sort out delivery issues.
• Email marketing. Only if you opt in at checkout. You can unsubscribe at any time from any email.
• Improve the product. Aggregated, never tied to your identity, used to fix bugs and make the report better.

4. Lawful basis (UK GDPR Article 6)

• Contract. Processing your quiz to deliver your report, and processing your order.
• Legitimate interest. Anonymous analytics to improve the product, fraud prevention, basic security logging.
• Consent. Email marketing, optional analytics cookies, and the processing of your quiz answers (health data, see below).
• Legal obligation. Keeping tax records as required by UK law.

Health data (special category)

Your quiz answers describe your symptoms, so they count as health data, a special category of personal data under UK GDPR Article 9 (and Article 9 of the EU GDPR). We process them on the basis of your explicit consent, given when you take the quiz, and only to generate and deliver your Decoder report. We keep them for as long as we provide the service to you, then delete or anonymise them. We do not store any medical data beyond your quiz answers: we do not ask for, collect or keep lab results, prescriptions or medical records.

5. Who we share with

We never sell your data. We use a small set of carefully chosen processors:

• Stripe, payment processing (Ireland / US).
• Anthropic, to generate the AI text of your Decoder report. Your quiz answers are sent to the API. We do not send your name or email along with them (US).
• Klaviyo, email delivery and engagement tracking (US).
• Supliful, only if you buy supplements: receives your name, shipping address and order to fulfill and ship to you (US).
• Vercel, hosting the website (US, with EU edge regions).
• Google Analytics 4, audience measurement, loaded only after you consent (US, with EU data controls).

6. International transfers

Several of the providers above are based in the United States. When your data is transferred outside the UK or EEA, we rely on the UK International Data Transfer Addendum and the EU Standard Contractual Clauses approved by the UK ICO and the European Commission. Each provider is bound to UK-equivalent levels of protection.

7. How long we keep your data

• Quiz responses and Decoder reports: 3 years, then deleted or anonymised.
• Email contact: kept until you unsubscribe, then anonymised within 30 days.
• Order and tax records: 7 years, as required by HMRC.
• Analytics events: 12 months at row level, then aggregated.

8. Your rights

Under UK GDPR you have the right to:

• Access a copy of the personal data we hold about you.
• Correct anything that is wrong.
• Have your data erased (right to be forgotten), within legal limits.
• Receive your data in a portable format.
• Restrict or object to our processing.
• Withdraw consent at any time, where consent is the lawful basis.

To exercise any of these rights, email hello@decodemeno.com from the address you used at checkout. We reply within 30 days.

9. Cookies

• Strictly necessary. Session, security, checkout. No consent needed; the site does not work without them.
• Analytics. Google Analytics 4. Loaded only after you accept the cookie banner.
• Marketing pixels. Meta and TikTok, where used. Loaded only with your consent.

10. Children

Decodemeno is not for anyone under 18. The product is targeted at women aged 40 to 58. If we learn that we have collected data from a child, we will delete it.

11. Changes to this policy

We may update this policy. The date at the top changes when we do. For material changes, we will email registered users at least 14 days before the change takes effect.

12. Complaints

We would much rather hear from you first, email hello@decodemeno.com. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.