Privacy Notice

What I collect and why

• Account details (name, email address, login credentials or Google sign-in identifier) — to create and secure your account and give you access to what you bought. Legal basis: performance of our contract.
• Purchase records (which products you own, order reference, date) — to unlock downloads and keep a record of your licence. Legal basis: contract.
• Support messages — to answer your question. Legal basis: contract and legitimate interests.
• Usage and technical data (pages viewed, device type, browser, IP address, download events) — to keep the site secure, prevent fraud and abuse of download links, and improve the products. Legal basis: legitimate interests.
• Marketing emails, only if you opt in — to tell you about new releases. Legal basis: consent, withdrawable at any time.

Payment card details are never collected or seen by me; they are handled by Paddle at checkout.

Who I share data with

• Paddle, the Merchant of Record for all orders — for payments, subscription management, invoicing, tax compliance and buyer support.
• Service providers who host the site, database, authentication and file storage, and any analytics or support tooling I use, acting on my instructions.
• Professional advisers such as accountants or lawyers, where needed.
• Authorities, where I am legally required to disclose information.

I do not sell personal data.

International transfers

My providers may process data in the United States and other countries. Where data is transferred out of the UK or EEA, it is protected by an adequacy decision or Standard Contractual Clauses.

How long I keep it

Account and purchase records are kept while your account is active and for as long as needed for tax and accounting obligations (generally seven years). Support messages are kept up to two years. Technical logs are kept for a short period for security. Data is deleted or anonymised once it is no longer needed.

Your rights

Depending on where you live, you may ask for a copy of your data, correction of inaccuracies, deletion, restriction of processing, portability, or object to processing based on legitimate interests. You can withdraw marketing consent at any time. Requests are answered within one month. If you are in the UK or EEA, you can also complain to your local data protection authority; US residents may have similar state-law rights, including the right not to be discriminated against for exercising them.

Security

Data is protected with appropriate technical and organisational measures, including encryption in transit, access controls, and private file storage where download links are generated on demand and expire shortly after issue.

Cookies

This site uses essential cookies and similar storage to keep you signed in and to run checkout securely; these cannot be turned off without breaking the site. Any analytics or marketing cookies are only set with your agreement, and you can change your mind at any time through your browser settings.

Contact

To exercise a right or ask a privacy question, email Bloom & Grow Digital at shontia@shontia-williams.com. Billing-related queries can also go to Paddle at paddle.net.