Privacy Statement

What this covers

This policy covers this website. It does not cover the checkout and course platforms that offers are delivered through — those run under their own privacy policies, and you agree to those separately when you buy.

What gets collected

• —Anything you submit to a lead magnet or an opt-in. Those forms live on the funnel sites rather than this one, and what you type goes to Supabase and MailerLite, both named below.
• —Aggregate, non-identifying analytics: pages viewed, referrer, approximate country, device type, and which outbound links were clicked.

What does not get collected

• —No advertising cookies are set by this site.
• —No cross-site tracking pixels are embedded in these pages.
• —No payment details ever touch this site. There is no checkout here.

Why it gets collected

If you email the address published on the press page, that address and whatever you wrote are used to reply to you. Nothing more. They are not sold, rented, or shared with a third party for their own marketing.

Analytics are used to work out which pages do their job. The measure that matters is which pages send people onward to an offer, which is why outbound clicks are counted.

Legal basis for processing

Consent, for marketing email. You give it by entering your address on one of the funnel pages and you withdraw it with the unsubscribe link in anything we send. Withdrawing it does not affect what was sent before.

Contract, for anything you have bought. We process what is needed to deliver it and to handle a refund request.

Legitimate interests, for keeping the sites up and for aggregate analytics. That means counting page views and outbound clicks without tying either to a named person.

No Data Protection Officer is appointed. This processing is small scale, involves no special-category data and does no large-scale monitoring, which are the conditions that would require one.

How long it is kept

Email you send is kept for as long as the conversation is useful, and deleted on request.

Analytics data is aggregated and is not tied to a named individual.

• —Your address stays on the MailerLite list until you unsubscribe, then goes within 30 days. A suppression record survives that, and exists only so you are not emailed again by mistake.
• —Opt-in and claim records in Supabase are kept for 24 months, which covers the refund window and the accounting year on either side of it.
• —Order records sit with Gumroad and ClickFunnels™ under their own retention terms. Each is the seller of record for its own transaction and we are not.

Your rights

You can ask what is held about you, ask for it to be corrected, or ask for it to be deleted. Email the address on the press page and it will be actioned.

Under UK and EU GDPR we answer within one month. In California, the CCPA and CPRA also let you ask what has been collected and shared and tell us not to sell or share it. Nothing here is sold or shared for anyone else's marketing, so there is nothing to opt out of.

The Australian Privacy Principles and the New Zealand Privacy Act 2020 give access and correction rights in similar terms. Whichever applies to you, ask at the same address.

• —Access. Ask what is held about you.
• —Rectification. Ask for it to be corrected.
• —Erasure. Ask for it to be deleted.
• —Portability. Ask for a copy in a machine-readable form.
• —Objection. Tell us to stop processing that runs on legitimate interests.
• —Opt out of marketing whenever you like, by unsubscribe link or by asking.

Third parties

Six, and that is the whole list. None of them receives your data for their own marketing.

• —Vercel, hosting. Serves this site and both funnel sites, and holds server logs including IP addresses.
• —Supabase, database. Holds opt-in records and the weekly enrolment counts behind the funnels.
• —MailerLite, email. Holds your address and the group you joined, and sends what you asked for.
• —Gumroad, checkout. Seller of record for The Weekend Page Set, The 7-Day Page Pack and The 10-Minute Leak Log. It takes the payment and keeps the order record.
• —ClickFunnels™, delivery. Runs and fulfils the One Funnel Away Challenge™ inside The 30-Day Profit Play, and holds that order under its own terms.
• —Plausible, analytics. Counts page views and which outbound links get clicked. It sets no cookies and builds no profile, which is why the section above has nothing to say about advertising cookies.

Sending data outside the UK and EU

Some of those providers process data outside the UK and the EEA. Where UK or EU personal data reaches one of them, the transfer runs on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, both of which form part of each provider's own data processing terms.

If you want to know which provider holds what before you hand anything over, ask first. The list above is the whole of it.

Changes

If this policy changes materially, the change will be dated at the top of this page rather than made quietly.