Privacy Policy.

Who is responsible for your data

The data controller is Hristiyan Lambev, Svishtov, Bulgaria. You can reach us at support@leobennettsecrets.com for anything in this policy.

Because purchases run through Gumroad as Merchant of Record, Gumroad is an independent controller of the transaction data it collects. Their own privacy policy governs how they handle it, and it's worth reading alongside this one.

What we collect

• Purchase information — your name, email address, country, and order details, passed to us by Gumroad after a sale.
• Payment details — handled entirely by Gumroad and its payment processors. We never see or store your card number.
• Support correspondence — if you email us, we keep that message and our reply.
• Basic server data — our website is hosted on Cloudflare, which processes standard request data such as IP address for security and delivery. We do not run advertising or tracking analytics on this site.

We do not collect special category data, and we do not knowingly collect information from children.

Why we use it, and our legal basis

• To deliver your purchase and provide support — performance of our contract with you.
• To keep accounting and tax records — compliance with a legal obligation.
• To notify buyers of new editions — only where you have opted in, on the basis of your consent. You can withdraw consent at any time.
• To keep the site secure and working — our legitimate interest in running a functional, protected website.

Who we share it with

Only the services needed to run the business:

• Gumroad — payment processing, tax handling, and file delivery.
• Cloudflare — website hosting and security.

We do not sell your personal data, we do not share it with advertisers, and we do not use it for automated decision-making or profiling.

International transfers

Gumroad and Cloudflare are US-based, so your data may be processed outside the European Economic Area and the United Kingdom. These providers rely on recognised safeguards for such transfers, including Standard Contractual Clauses and applicable adequacy frameworks.

How long we keep it

• Order and tax records — retained for as long as accounting law requires, generally 5 years.
• Support emails — up to 2 years, then deleted.
• Marketing contacts — until you unsubscribe or ask to be removed.

Your rights

Wherever you live, you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or stop using it for marketing. Email support@leobennettsecrets.com and we'll respond within 30 days, free of charge.

If you're in the EU or UK

Under the GDPR and UK GDPR you also have the right to data portability and the right to object to processing based on legitimate interests. If you're unhappy with our response, you can complain to your national data protection authority — in Bulgaria, the Commission for Personal Data Protection; in the UK, the Information Commissioner's Office.

If you're in California

You have the right to know what personal information is collected, to request deletion or correction, and to opt out of any sale or sharing of personal information. We do not sell or share personal information as those terms are defined under California law. You will never be discriminated against for exercising these rights.

If you're in Canada

Under PIPEDA you may access your personal information and challenge its accuracy. Requests go to the same address above, and you may escalate to the Office of the Privacy Commissioner of Canada.

Cookies

This site uses only what's strictly necessary to serve the page and keep it secure. We do not run advertising cookies, analytics cookies, or third-party trackers. Gumroad's checkout, hosted on their domain, sets its own cookies governed by their policy.

Changes to this policy

If we change how we handle data, we'll update this page and the "last updated" date above. Material changes affecting existing buyers will be communicated by email where we have a lawful basis to contact you.

Contact