The document that follows explains how we comply with The EU General Data Protection Regulation (GDPR).
If you have given us your email address (by emailing us, buying something from our website or subscribing to our newsletter, for example) you should read this to reassure yourself that we are looking after your data responsibly. We value the security of your information highly and will never intentionally breach the rules.
The information we collect:
Email addresses of people who have emailed us, who have expressed interest in our products, by taking one of our quizzes or surveys, and emails redirected from our payment gateway – Clickbank.com
The email addresses, names, and some of the answers people have provided to the quizzes/surveys upon signing up to our mailing lists are collected by SurveyFunnel.io and held by ActiveCampaign.com
Email addresses and names of people who have bought something from our website. Orders are processed by Clickbank.com.
After purchasing customers create accounts on our website (via a WordPress Plugin called Wishlist Member) where they enter their names and email address so they can access their products. These can be the same or different than the ones given to Clickbank upon purchase.
We do not share this nor sell this information with anyone.
Clickbank.com processes data and payments for us for all of our products. We have no access to payment information, but do have email addresses and some postal addresses. These have all been given voluntarily to Clickbank.
We have access to a database of page fans on Facebook. We are the data controller but not the data processor of that data base. We use strong and secure passwords to protect this data.
Communicating privacy information
We are taking the following steps:
We have put this document on our website, with a link from our sign-up sections for new subscribers.
On every email that we send to our subscribers we remind them that they can unsubscribe at any time and they will not be contacted again. The unsubscribe message is included in every mailing.
Upon request, we will delete data from ActiveCampaign and Wishlist Member.
If someone asked to see their data, we will provide a screenshot and/or document of their entry/entries.
If they unsubscribe themselves from the ActiveCampaign list, their data is deleted on a regular basis.
Subject access requests
We aim to respond to all requests within 24 hours and usually much sooner.
Lawful basis for processing data
If people have emailed us, they have given us their email address. We do not actively add it to a list but HelpScout (our support system) or ZenDesk (our inbox manager) will save it. We will not add it to any database or spreadsheet unless someone asks us to or gives us explicit permission.
If people have opted into our ActiveCampaign lists (by subscribing) they have actively opted in, in the knowledge that they will receive occasional emails. If people have bought something from our website, their postal and email addresses are saved by Clickbank. This is standard practice for purchasing online but we do not use this data.
We regard this consent as confirmed for a year, or until the person asks us to remove the data. We have never harvested and/or scraped email addresses, nor would we. Anyone on our lists has contacted us or voluntarily given us their email address and/or name.
Consent is not indefinite, so we will make sure that we remind subscribers that they can unsubscribe or ask for their data to be removed.
We have done everything we can to prevent this, by strongly password-protecting our website as well as ActiveCampaign, Clickbank, Facebook accounts. If any of those organizations were compromised, we would take steps to follow their advice immediately.