Privacy Policy – Magical Embodiment LLC (Updated 2025)
Last updated: October 2025
1) Introduction
Magical Embodiment, LLC (“Magical Embodiment,” “Company,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, transfer, and protect personal data when you visit our websites (magicalembodiment.net, themagicalembodimentshow.net), enroll in programs (including The School of Complete Femininity (مدرسة الأنوثة المتكاملة) and The School of Magical Embodiment), attend events, or otherwise interact with us.
This policy is organized into two parts to address differing legal frameworks: Section A for users in the Kingdom of Saudi Arabia (PDPL compliance), and Section B for international users (U.S. & global). If you are located in Saudi Arabia, Section A applies to you. If you are outside Saudi Arabia, Section B applies to you. Some provisions (e.g., platforms, security) apply to both.
2) Third-Party Platforms We Use
To deliver our websites, programs, and payment services, we rely on trusted third-party platforms. These providers process limited personal data under contractual obligations and security standards:
- Kajabi, LLC — website & course/learning platform (hosting, account management, content delivery, user progress).
- Stripe, Inc. — payment processing (PCI-DSS compliant; handles card and transaction data directly).
- Zoom Video Communications, Inc. — live calls and events (webinars, workshops).
- Google Analytics — site analytics (traffic and usage metrics, cookies).
- Meta Platforms, Inc. (Facebook/Instagram) — advertising and pixels for campaign performance.
- YouTube (Google LLC) — embedded videos and channel content.
- WhatsApp Business — customer support and communication.
These platforms may process or store data on servers outside your country (including the United States). We implement cross-border safeguards described below.
Section A — Privacy for Saudi Arabia (PDPL)
A1. Controller & Contact
Controller: Magical Embodiment, LLC (Texas, USA)
Primary Contact (Data Inquiries): [email protected]
We will identify a data protection point of contact for PDPL inquiries and will respond in accordance with applicable implementing regulations.
A2. Personal Data We Collect
- Identifiers & Contact: name, email, phone, address, WhatsApp ID (if you message us).
- Account & Program Data: login, enrollment history, course progress, preferences.
- Payment Data: tokenized payment details and transaction info handled primarily by Stripe.
- Technical & Usage Data: IP address, device/browser, timestamps, cookies, analytics.
- Communications: emails, messages, call/chat logs (e.g., via WhatsApp or Zoom registration).
- Other Voluntary Data: forms, surveys, application responses you choose to provide.
A3. Purposes & Lawful Bases
We process personal data for the following purposes under PDPL lawful bases:
- Contract: to register your account, deliver programs, process payments, and provide support.
- Consent: optional communications (e.g., marketing), certain cookies/analytics where required.
- Legal Obligation: accounting, fraud prevention, compliance with applicable laws.
- Legitimate Interests (when permitted): to improve services and website safety, provided such interests do not prejudice your rights.
A4. Consent & Withdrawal
Where we rely on consent, we will obtain it clearly and explicitly. You may withdraw consent at any time by emailing [email protected]. Upon withdrawal, we will stop processing for that consent-based purpose unless another legal basis applies.
A5. Data Subject Rights (PDPL)
Subject to PDPL and its regulations, you may request to:
- Access your personal data and request a copy.
- Correct or update inaccurate data.
- Request deletion where data is no longer needed or processing is unlawful.
- Restrict or object to certain processing.
- Port your data where technically feasible and permitted.
To exercise rights, contact [email protected]. We will respond within statutory timelines.
A6. Cross-Border Transfers
We may transfer personal data outside the Kingdom of Saudi Arabia for hosting, processing, or support (e.g., Kajabi, Stripe, Zoom, Google, Meta, YouTube). Where we do so, we implement PDPL-compliant safeguards (e.g., adequate protection jurisdictions, approved contractual clauses, or other lawful mechanisms) and limit transfers to what is necessary for stated purposes.
A7. Retention & Deletion
We retain personal data only for as long as necessary to fulfill the purposes described (or as required by law), after which we securely delete or anonymize it. Specific retention may vary based on contractual, legal, or accounting requirements.
A8. Security Measures
We use appropriate technical and organizational measures (encryption in transit, role-based access, secure processors like Stripe, platform security reviews) to protect personal data against accidental or unlawful destruction, loss, alteration, disclosure, or access.
A9. Breach Notification
In the event of a personal data breach likely to impact privacy or rights, we will notify the competent Saudi authority (e.g., SDAIA/NDMO) in accordance with PDPL requirements, and affected individuals when required, without undue delay.
A10. Cookies & Tracking (Saudi Users)
We use necessary cookies for site operation, and (where applicable) consent-based cookies for analytics and advertising. You can manage cookies in your browser; disabling some cookies may impact site functionality. Platforms involved: Google Analytics (metrics), Meta pixels (ad performance), YouTube embeds (media).
A11. Changes to this Saudi Section
We may update this Section A to reflect changes in PDPL or our processing. The “Last updated” date above will change, and continued use after updates constitutes acceptance.
Section B — Privacy for International Users (U.S. & Global)
B1. Scope
This section applies to users located outside the Kingdom of Saudi Arabia. We follow generally accepted U.S. privacy practices and applicable laws. (We do not market to the EU and do not tailor this policy to GDPR.)
B2. Data We Collect
- Contact & Account: name, email, phone, mailing address, login details.
- Purchase & Payment: payment method and transaction data handled by Stripe.
- Program Activity: enrollments, progress, attendance (Zoom), messages.
- Device & Usage: IP address, browser, device type, cookies, analytics.
- Communications: emails, support messages, WhatsApp chats (when used).
B3. How We Use Data
- Deliver services and programs; manage accounts; provide support.
- Process payments; prevent fraud; maintain security.
- Send transactional notices (program updates, receipts, policy changes).
- Improve websites and offerings (analytics, diagnostics).
- Send marketing communications where permitted (see B4).
- Comply with legal obligations (tax, accounting, lawful requests).
B4. Marketing (No Double Opt-In)
We do not use double opt-in. If you provide your email or phone to receive updates, we will send you communications until you unsubscribe or opt out. You can opt out any time by using the unsubscribe link or contacting [email protected]. We may use Meta/Google ads and pixels to measure campaign performance and reach interested audiences.
B5. Your Rights (Access, Update, Delete)
Subject to applicable law, you may request to access, update, or delete your personal information, or to object to/limit certain processing. We will respond within a reasonable time. To exercise rights, email [email protected].
B6. Sharing & Disclosure
- Service Providers: Kajabi, Stripe, Zoom, Google Analytics, Meta, YouTube, WhatsApp — to operate our services.
- Legal: to comply with laws, enforce agreements, protect rights, prevent fraud or abuse.
- Business Changes: during mergers, acquisitions, or asset transfers, consistent with this policy.
We do not sell or rent your personal information.
B7. Cross-Border Transfers
We and our providers may process data in the United States or other countries. By using our services, you consent to such transfers subject to appropriate safeguards.
B8. Retention
We keep personal data as long as necessary to provide services and meet legal obligations, then delete or anonymize it. Specific retention depends on program, payment, and regulatory requirements.
B9. Security
We employ technical and organizational measures (HTTPS/TLS, access controls, secure processors like Stripe) to protect information. No method is 100% secure; please use strong passwords and protect your account.
B10. Cookies & Similar Technologies
We use necessary cookies (site operation) and optional cookies (analytics/ads). You can change browser settings to manage cookies; some features may not function without them.
B11. Children’s Privacy
Our services are intended for users 18+. We do not knowingly collect data from children. If you believe a minor provided data, contact us to remove it.
B12. Changes to this International Section
We may update this Section B from time to time. The “Last updated” date will change, and continued use after updates means you accept the changes.
Contact Information
Magical Embodiment, LLC
539 W Commerce St, Dallas, TX 75208, United States
Email: [email protected]
If you are in Saudi Arabia, please reference “PDPL Request” in your subject line to help us route your inquiry appropriately.
