Privacy Policy - Overcoming Candida

Last updated: October 27, 2026

This Privacy Policy explains how Overcoming Candida (“we”, “us”, “our”) collects, uses and shares personal information when you visit overcomingcandida.com, sign up for our emails, or buy our ebook.

Table of Contents

Who we are

Overcoming Candida, 400 Rella Blvd., STE 207-177, Montebello, NY 10901, USA. Email: info@overcomingcandida.com. Overcoming Candida is the controller of the personal information described in this policy.

What we collect

Information you give us: your first name and email address when you sign up for our free guide or newsletter; your name, email address and country when you buy the ebook; and anything you send us through our contact form.
Purchase information: what you bought, the price, the date and the order number. Payments are processed by PayPal, including debit and credit card payments made through PayPal. We do not see or store your full card number.
Account information: if you choose to create an account at checkout, your login details and order history.
Email activity: when you confirm your subscription we record the date, time and IP address as proof of consent. Our emails may track whether a message was opened and which links were clicked, so we can see what is useful and remove inactive subscribers.
Automatic information: IP address, browser and device type, pages viewed, links clicked, the site that referred you and approximate location (country or city level). Some of this is collected by our web server and security tools for every visit. Analytics and testing data is collected only if you allow it (see Cookies and similar technologies).

We do not ask for, and you should not send us, details about your medical history or diagnoses.

How we use it

To send the free guide, welcome emails and newsletter you asked for (you can unsubscribe at any time).
To process orders, deliver your download, handle refunds and provide customer support.
To understand how the site is used and improve it, including testing different versions of a page (only with your consent).
To keep the site secure, prevent spam and fraud, and fix problems.
To meet legal, tax and accounting obligations.

We do not use your information for targeted advertising, and we do not run advertising tracking pixels on this site.

Emails

We use double opt-in: you only receive our newsletter after you click the confirmation link we send you. Every email includes an unsubscribe link and our postal address. Order emails (receipts and download links) are sent even if you unsubscribe from marketing emails.

Who we share it with

We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising. We share it only with service providers that help us run the site, under contracts or terms that limit how they can use it:

Hostinger – website hosting.
SMTP2GO – sending our emails (it processes your email address, email content and open and click activity).
PayPal – payment processing. PayPal also uses your information under its own privacy statement.
Google Analytics 4 – site statistics and purchase measurement, only if you accept analytics cookies. It is set up through a WooCommerce analytics plugin, which can also send some events (such as completed purchases) from our server, and we use Google Site Kit to view reports. We do not use Google advertising features on this site: ad storage and ad personalization are always set to “denied”.
VWO (Wingify) – A/B testing of page versions, only if you accept testing cookies.
WordPress and WooCommerce plugins on our own server – our newsletter (The Newsletter Plugin), store, security and caching tools store data on our hosting, not with the plugin makers.

We may also disclose information if the law requires it, to protect our rights or the safety of others, or to a buyer if the site or business is sold.

Affiliate links

Some links on this site are affiliate links, including links to Amazon. As an Amazon Associate we earn from qualifying purchases. When you click an affiliate link you leave our site. The retailer (for example Amazon) may set its own cookies to credit us for the sale, and its privacy policy applies to what you do there. We do not receive your name or what you bought, only commission reports. See our Affiliate Disclosure.

Cookies and similar technologies

When you first visit, we ask whether you accept optional cookies. Optional analytics and testing tools do not load until you accept them. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a choice to turn off all optional cookies. You can change your choice at any time with the Cookie settings link in the footer.

Essential (always on)

WordPress and WooCommerce: cart, checkout, account login and security (for example woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*, wordpress_logged_in_*).
LiteSpeed Cache: _lscache_vary, which shows logged-in users and shoppers the right version of a page.
Your cookie choice: oc_consent (6 months).

Analytics (only with consent)

Google Analytics 4: _ga, _ga_* (up to 2 years) and awca_ga4_session_id.
WooCommerce order attribution: sbjs_* (shows which page or campaign led to an order).
Our own first-party cookies oc_cta and oc_abv (30 days), which show which ebook box or email led to a purchase.

A/B testing (only with consent)

VWO: _vwo_*, _vis_opt_* and similar cookies and local storage (up to 1 year).
Our own cookie oc_v (90 days), which keeps showing you the same version of a page during a test.

You can also block or delete cookies in your browser settings, and opt out of Google Analytics with Google’s browser add-on. If you block essential cookies, the cart and checkout may not work.

Your privacy rights

Depending on where you live, you may have the right to:

know what personal information we hold about you and how we use it, and get a copy;
correct inaccurate information;
delete your information;
opt out of the sale of personal information, sharing for targeted advertising, and profiling (we do none of these);
withdraw consent at any time, for example by unsubscribing from emails or changing your cookie settings;
not be treated differently for using your rights.

These rights apply in particular to residents of California (CCPA/CPRA) and other US states with privacy laws, such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others. To make a request, email info@overcomingcandida.com with the subject “Privacy request”, or write to us at the address above. We will verify your request using your email address, and we reply within 45 days (one month for EU/UK requests). You may use an authorized agent; we may ask for proof of the agent’s authority. If we decline your request, you can appeal by replying to our decision. If your appeal is denied, you can contact your state attorney general.

California “Shine the Light”: we do not share personal information with third parties for their own direct marketing.

Consumer health data (Washington, Nevada and similar laws)

Our site is about candida, diet and supplements, so the pages you read or the ebook you buy could suggest an interest in a health topic. We use this information only to provide the content, emails and products you ask for. We do not sell it, we do not use it for advertising, and analytics run only after you consent. If you are a resident of Washington (My Health My Data Act), Nevada or another state with a consumer health data law, you can confirm whether we hold such data about you, see the third parties it was shared with (listed above), ask us to delete it and withdraw consent, by emailing info@overcomingcandida.com.

Visitors from the EU, EEA, UK and Switzerland

We are based in the United States, and our service providers may process your information in the US and other countries. Where required, transfers rely on safeguards such as the EU-U.S. Data Privacy Framework or standard contractual clauses used by those providers. Our legal bases are: performing our contract with you (orders and downloads); your consent (newsletter, analytics and testing cookies), which you can withdraw at any time; our legitimate interests (site security, fraud prevention and answering your messages); and legal obligations (tax and accounting records). In addition to the rights above, you can object to or restrict certain processing, ask for data portability, and complain to your local data protection authority.

How long we keep information

Newsletter: until you unsubscribe. We then keep a minimal record so we do not email you again.
Orders and invoices: as long as tax and accounting law requires (generally up to 7 years).
Customer accounts: until you ask us to delete the account, apart from order records we must keep.
Contact messages: up to 2 years.
Analytics: according to our Google Analytics data-retention setting.
Security and server logs: for a limited period, as needed to protect the site.

Children

This site is intended for adults. We do not knowingly collect personal information from anyone under 18, and never from children under 13. If you believe a child has given us personal information, email info@overcomingcandida.com and we will delete it.

Security

We use HTTPS encryption, a security plugin, limited admin access and reputable service providers. No method of sending or storing data online is 100% secure, but we work to protect your information.

Changes to this policy

If we update this policy, we will change the “Last updated” date at the top. If the changes are significant, we will post a notice on the site or let subscribers know by email.

Contact us

Overcoming Candida, 400 Rella Blvd., STE 207-177, Montebello, NY 10901, USA
Email: info@overcomingcandida.com