Privacy Policy

Data Controller

This website is operated by:

1. Information We Collect

When you make a purchase, we collect your email address, name (if provided), and payment information through our payment processor, Stripe. We do not store credit card information on our servers.

We also automatically collect:

• IP address (for fraud prevention and download tracking)
• Browser type and device information
• Download timestamps and user agent strings

2. Legal Basis for Processing (UK GDPR)

We process your personal data on the following legal bases under UK GDPR:

• Contract Performance (Article 6(1)(b)): We need your email and name to fulfill your order and deliver the digital products you purchased.
• Legal Obligation (Article 6(1)(c)): We must retain transaction records for 7 years to comply with UK tax law (Finance Act 1998).
• Legitimate Interests (Article 6(1)(f)): We log IP addresses and download attempts to prevent fraud and abuse of our service. This protects both our business and other customers.

3. How We Use Your Information

We use your information to:

• Process your order and deliver your digital products
• Send you order confirmations and download links
• Provide customer support
• Prevent fraud and abuse
• Comply with legal obligations
• Send product updates (only with your consent)

4. Data Storage and Security

Your data is stored securely using industry-standard encryption. We use Vercel for hosting, Stripe for payments, and Resend for email delivery. Each service maintains its own security standards and privacy policies.

5. Third-Party Services & International Data Transfers

We use the following third-party services:

• Stripe (US/EU): Payment processing - uses Standard Contractual Clauses (SCCs)
• Resend (US/EU): Email delivery - data processed in EU region where possible
• Vercel (US): Website hosting and database - uses Standard Contractual Clauses

Some of these providers may transfer your data outside the UK/EU. These transfers are protected by Standard Contractual Clauses (SCCs) approved by the EU Commission and additional security measures including encryption and access controls.

6. Data Retention Periods

We retain your data for the following periods:

• Order information (email, name, purchase details): 7 years from purchase date (UK tax law requirement)
• Payment information: We don't store this - Stripe retains for their compliance purposes
• Download logs (IP address, user agent): 90 days, then anonymized
• Email logs: 1 year for customer support purposes
• Support correspondence: 3 years after last contact

After these periods, data is either securely deleted or anonymized.

7. Your Rights (UK GDPR)

Under UK GDPR, you have the right to:

• Access your personal data
• Rectification - correct inaccurate data
• Erasure - request deletion of your data
• Restrict processing of your data
• Data portability - receive your data in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is based on consent)

8. For California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

9. Cookies

We use minimal cookies for essential functionality (e.g., maintaining your session during checkout). We do not use tracking or advertising cookies.

10. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date at the top.

We encourage you to review this policy periodically. Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this privacy policy or wish to exercise your data rights, please contact us: