Privacy Policy
Ester Research Laboratory Last updated: 20 August 2026
Who we are
For anything relating to your personal data, contact us at hello@esterlab.org. A postal address is available on request.
Under the EU General Data Protection Regulation (GDPR), we are the data controller for the personal data described below.
What we collect, and why
If you subscribe to our email list
You give consent by entering your email address and then clicking the confirmation link we send you. Nothing is sent to you until you click that link.
If you buy one of our guides
Purchases are handled by Gumroad, which acts as the seller of record. Payment card details never reach us. We receive your email address and details of what you bought, so we can deliver the product and provide support. Legal basis: performance of a contract.
Gumroad processes your data under its own privacy policy, which you should read before purchasing.
When you visit our landing pages
Our pages use Invisible reCAPTCHA by Google to block automated spam signups. This means Google receives technical data including your IP address and browser information. Legal basis: legitimate interest in keeping our list free of fraudulent signups. Google’s privacy policy applies to that processing.
Our domain uses Cloudflare for DNS and security, which processes connection data such as IP addresses for the purpose of delivering and protecting the site.
Who else handles your data
We use the following service providers, who process personal data on our instructions under data processing agreements:
- Kit (Kit.com, Inc., United States) — email list management and delivery
- Zoho Corporation (EU data centre) — our own email inbox, so we can receive and reply to your messages
- Gumroad — sales and product delivery
- Cloudflare — DNS and site security
- Google — reCAPTCHA spam protection
Some of these providers are based outside the European Economic Area, principally in the United States. Where that is the case, transfers are covered by the European Commission’s Standard Contractual Clauses or by an adequacy decision such as the EU–US Data Privacy Framework.
We do not sell your personal data. We do not share it with advertisers or data brokers.
How long we keep it
We keep your email address and subscription record for as long as you remain subscribed.
If you unsubscribe, we keep a minimal record — your email address and the fact that you opted out — so that we do not accidentally contact you again. You can ask us to erase this too.
Records relating to purchases are kept for as long as accounting and tax law requires.
Your rights
Under GDPR you have the right to:
- Rectification — have inaccurate data corrected
- Access — get a copy of the personal data we hold about you
- Erasure — have your data deleted
- Restriction — have us pause processing while a dispute is resolved
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — at any time, without giving a reason
Withdrawing consent is deliberately easy: every email we send has an unsubscribe link at the bottom. One click and you’re off the list. Withdrawing consent does not affect the lawfulness of anything we did before you withdrew it.
To exercise any of these rights, email hello@esterlab.org. We will respond within one month.
Children
Our content and products are intended for adults. We do not knowingly collect data from anyone under 16. If you believe a child has subscribed, email us and we will delete the record.
A note on what we publish
Our guides and videos summarise published scientific research. They are educational material, not medical advice, and no personal health data is collected, requested or stored by us at any point.
Changes
If we change this policy, we will update the date at the top. Material changes affecting how we use your data will be announced by email before they take effect.
