Privacy Policy
Short version: I collect the minimum needed to answer you, deliver what you bought, and send emails you asked for. Nothing is sold, nothing is shared with advertisers, and there is no advertising or cross-site tracking on this site.
What Is Collected
- When you contact me or fill in a form: your name, email, and whatever you write.
- When you buy something: your email, billing country, and VAT number if you enter one. Card details go straight to the payment provider and are never seen or stored by this site.
- When you download a free template: your email and which template you took.
- When you subscribe to emails or get a Security Check result by email: your email, whether messages were opened, and which links were clicked.
- Automatically: standard server logs, including IP address and browser, kept 30 days.
Why
- To deliver and support something you paid for, and to handle refunds.
- To reply to enquiries and prepare proposals.
- To meet accounting and tax record-keeping obligations.
- To send marketing emails, only where you opted in, with unsubscribe in every message.
- To keep the site secure and working.
Under the GDPR these rest on contract, legal obligation, legitimate interest, and consent for marketing. Withdrawing marketing consent never affects access to something you already bought.
Who Else Sees It
Running this site means using third-party services. Personal data may be handled by:
- A payment processor, for checkout, invoicing, tax and refunds
- An email delivery provider, for receipts and newsletters
- An email address verification service (Verifalia, by Cobisi Research S.r.l., Italy), to check that an address can still receive email before I write to it
- Hosting and content delivery providers
- Cloudflare Web Analytics, to count page visits
- A scheduling provider, if you book a call
- Contact-management and form tools, to keep track of enquiries, subscribers and unsubscribes
- Document and workspace tools used to deliver client work
Each acts on my instructions under a data processing agreement. Some operate outside the European Economic Area, in which case transfers rely on the European Commission's Standard Contractual Clauses or an equivalent approved safeguard. Your data is never sold or rented.
How Long It Is Kept
- Purchase and invoice records: 10 years, as tax rules require.
- Email subscribers: until you unsubscribe. After that, I keep your email address on a do-not-email list, with the date and how you unsubscribed, so you are never emailed again. The record that makes your personal unsubscribe link work, and the delivery, open and click records of emails already sent to you, are also kept. These do not have an automatic deletion date yet, and you can ask me to delete them at any time.
- Enquiries that do not become work: 24 months.
- Client project records: 5 years after the work ends.
- Security Check results: a copy of your result page is also stored on Supabase for 730 days, and it is deleted on request. Deleted copies may remain in encrypted backups for up to 30 days before they are purged.
Cookies
No advertising and no cookie banner. Apart from the Gumroad store cookie described below, the only cookies that can be set are strictly necessary ones placed by the payment provider on its own checkout page, by the booking widget if you open it, and by our network provider (Cloudflare) to block automated traffic. The first two only happen because you chose to start that action.
My store (store.anthonytoday.com) is run by Gumroad, which sets its own visitor-ID cookie when you visit it. Because the store shares the anthonytoday.com domain, your browser may also send that cookie when you visit this site. See Gumroad's privacy policy.
To count page visits, this site uses Cloudflare Web Analytics. It sets no cookies, does not store your IP address, and does not track you across sites. It is not loaded on unsubscribe, thank-you or private link pages.
Emails I send through my email provider (Resend), including newsletters, marketing emails and Security Check result emails, use its open and click tracking to measure how each email performs. Each one contains a tiny invisible image (a tracking pixel) that records when it is opened, and its links, including the unsubscribe link, pass through links.anthonytoday.com on the way to the page. This data is used only to measure email performance. It is never used for advertising and is not shared with anyone else for their own use.
If this site's own pages ever add a cookie beyond strictly necessary ones, this page will be updated and a consent banner will appear before it is set.
Your Rights
If you are in the EU, the UK or Switzerland you can ask to see your data, correct it, delete it, restrict or object to its use, take it elsewhere in a portable format, or withdraw consent to marketing. You can also complain to your national data protection authority.
To exercise any of this, or to ask anything about this policy, email [email protected].
Requests are answered within 30 days. No account, no form, no charge.
Children
This site is not aimed at anyone under 16 and no data is knowingly collected from children.
Changes
This policy is updated as the services change. Material changes are announced to email subscribers before they take effect.
