Privacy Notice
Last updated: May 25, 2026
This Privacy Notice explains how O2 XTUDIO LLC ("O2 XTUDIO", "we", "us", "our"), trading as CalmPath, collects, uses, shares, and protects your personal data when you use our website and purchase our products.
1. Controller
O2 XTUDIO LLC is the data controller responsible for your personal data collected through this site. You can reach us at obioma@o2xtudio.com.
2. Categories of personal data we collect
- Identity & contact data: name, email address.
- Account data: login credentials, account preferences, membership status.
- Order data: products purchased, order references, shipping address for physical editions.
- Support data: messages and attachments you send us.
- Usage & device data: pages viewed, IP address, browser type, device identifiers, and basic telemetry.
Payment card details are collected directly by Paddle (our Merchant of Record) and are not stored on our systems.
3. Purposes and legal basis
- Provide the service — account creation, delivering eBooks, fulfilling physical orders, managing memberships. Legal basis: performance of a contract.
- Customer support — responding to your inquiries. Legal basis: performance of a contract; legitimate interests.
- Security & fraud prevention — protecting accounts and detecting abuse. Legal basis: legitimate interests; legal obligation.
- Product improvement — analyzing usage to improve CalmPath. Legal basis: legitimate interests.
- Marketing — sending updates and offers where permitted. Legal basis: consent (you can withdraw any time).
4. Sharing your data
We share personal data with:
- Paddle.com Market Ltd — our Merchant of Record for sale of products, subscription management, payments, tax compliance, invoicing, and refund handling.
- Service providers / subprocessors — hosting, database, email delivery, and analytics providers acting on our instructions.
- Professional advisers — legal, accounting, and compliance advisers when needed.
- Authorities — where required by law or to protect our legal rights.
5. Data retention
We keep personal data only for as long as needed for the purposes above, to comply with legal, tax, and accounting obligations, or to resolve disputes. When no longer needed, we delete or anonymize it.
6. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, or portability of your personal data, and object to or withdraw consent for certain processing. UK/EEA residents may also lodge a complaint with their local supervisory authority. We will respond within one month. Contact us at obioma@o2xtudio.com.
7. International transfers
Where personal data is transferred outside your country, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
8. Security
We implement appropriate technical and organisational measures — including encryption in transit, access controls, and least-privilege practices — to protect your personal data.
9. Cookies
We use strictly necessary cookies to operate the site and may use analytics cookies to understand usage. You can manage cookies through your browser settings.
10. Changes
We may update this Notice from time to time. The "Last updated" date above will reflect any changes.