11. Data Protection

11.1 General

The Rebellion Within collects and processes personal data in accordance with Substack’s Privacy Policy and applicable data protection laws.

We may collect personal data such as your name, email address, payment information, and any other details you provide when subscribing, purchasing, or contacting us. Your data is used solely to provide and improve our Services, communicate with you, process payments, and comply with legal obligations.

We may share your data with third-party service providers only as necessary to deliver our Services. We do not sell your personal data.

Your data is retained only as long as necessary for the purposes above or as required by law.

11.2 EU/EEA Users

For users in the EU/EEA, we process your data in accordance with the General Data Protection Regulation (GDPR) based on:

• Contract performance (e.g., delivering Services).

• Your consent (where applicable, e.g., newsletters).

• Our legitimate interests (e.g., improving Services, fraud prevention).

You have the right to:

• Access, correct, or delete your personal data.

• Object to or restrict processing.

• Request data portability.

• Withdraw consent (where applicable).

• To exercise these rights, contact us.

If you are located outside the EU/EEA, similar rights may apply under your local laws. Consult a legal professional in your jurisdiction to understand your specific rights and obligations.