What I collect, and what I don't.
Short version: an email address if you give me one, an order record if you buy something, and anonymous page analytics. Nothing is sold or shared.
This is a plain-English starting draft, not legal advice. Have a solicitor in your jurisdiction review it before launch, and fill in the bracketed details — the trading entity, address and jurisdiction are deliberately left blank.
What I collect
Your email address, if you subscribe or buy a course. Held by my email provider and exported on a schedule to storage I control.
Order records if you buy — what you bought, when, and the amount. Card details are handled entirely by the payment processor and never reach me.
Anonymous analytics: page views and scroll depth, with no cookies and no personal identifiers. I use this to see which articles people finish. It cannot identify you.
Anything you send me through the contact form or by email, kept as long as it's useful and then deleted.
What I don't collect
- Advertising or cross-site tracking data. There are no third-party ad or tracking scripts on this site.
- Card or payment details. Those exist only with the payment processor.
- Anything I don't have a concrete use for.
Who it's shared with
Only the processors that make the site work: the email provider, the payment processor, the course platform and the analytics provider. Each one only receives what it needs. Nothing is ever sold, rented or traded, and there is no circumstance in which I'd do that.
Your rights
You can ask me for a copy of everything I hold on you, ask me to correct it, or ask me to delete it. Email me and I'll do it — no form and no verification theatre beyond confirming you control the address. If you're in the UK/EU these are rights under GDPR; I extend the same handling to everyone regardless of location because maintaining two standards would be worse for everybody.
Unsubscribing
Every email has a one-click unsubscribe. It works immediately. If it ever doesn't, that's a bug and I want to hear about it.
Cookies
The site itself sets none. The course platform sets a session cookie when you log in, which is required for login to function. That's the complete list, which is why there's no consent banner.
Contact
Data controller: [TRADING ENTITY], [ADDRESS]. Questions to the contact page.
Questions about any of this? Email me and I'll answer plainly.