Privacy policy

Hosting (Krystal)

This website and its data are hosted at Krystal. The company provides various web hosting services and uses renewable energy to power its data centres. They act as a data processor, storing personal data necessary to deliver my services. They follow GDPR-compliant practices.

More info: Krystal privacy policy.

Security (Wordfence)

I use Wordfence to help protect the site and its users from malicious activity, unauthorised login attempts, and other security threats.

• What data is processed: IP addresses, login attempts, and potentially email addresses for security notifications.
• Lawful basis: Legitimate interest (Art. 6(1)(f) GDPR) – to ensure the safety and security of the site for everyone.
• Wordfence acts as a data processor for these purposes, and data is only used for security and maintenance.

More info: Wordfence privacy policy.

Maintenance (ManageWP)

I use ManageWP for backups and uptime monitoring. They act as a data processor and access personal data only as necessary to maintain site functionality and security.

• Lawful basis: Legitimate interest (Art. 6(1)(f) GDPR) – to maintain the integrity, availability, and security of the website.

More info: ManageWP privacy policy.

Image delivery (ShortPixel)

I use the ShortPixel Image Optimizer Content Delivery Network (CDN) to deliver optimised images quickly. ShortPixel only receives the technical information needed to serve them such as your IP address, browser type, and device. This is transient and not used for tracking.

• Lawful basis: Legitimate interest (Art. 6(1)(f) GDPR) – a faster loading website saves everyone time and money.

More info: ShortPixel privacy policy

Video delivery (Vimeo)

I use Vimeo to deliver videos on this site. Vimeo only receives the technical information needed to serve them such as your IP address, browser type, and device. Videos are always set to Do Not Track mode to disable analytics and tracking cookies. Depending on the type of video, the lawful basis for processing your data differs:

Paid content videos

• Some videos may be provided as part of a purchased product (e.g. course content).
• Lawful basis: Performance of a contract (Art. 6(1)(b) GDPR) – video delivery is part of the product you purchased.

Marketing / sales / free videos

• Some videos may be embedded for informational or promotional purposes.
• Lawful basis: Legitimate interest (Art. 6(1)(f) GDPR) – to inform and help potential users understand my offerings.
• Friendly note: If you’d rather not have free videos delivered… the easiest way is just don’t watch them!

Vimeo as Independent Controller

• Vimeo determines certain aspects of how it processes data.
• Data may be transferred outside the EU. Vimeo relies on the European Commission’s Standard Contractual Clauses (SCCs) to safeguard such transfers.

More info: Vimeo privacy policy.

Transactional email (Postmark)

I use Postmark to send transactional emails, such as account confirmations, purchase receipts, and information about product updates.

• What data is shared: your name, email address, and details necessary to deliver the email.
• Lawful basis: Performance of a contract (Art. 6(1)(b) GDPR) – email delivery is part of the product you purchased.
• Data protection: Postmark acts as my data processor and adheres to GDPR standards.

More info: Postmark privacy policy.

Email marketing (Campaign Monitor)

I use Campaign Monitor to send marketing emails and newsletters about my products, updates, or other content you’ve opted in to receive.

• What data is shared: your name, email address, and any preferences you provide.
• Lawful basis: Consent (Art. 6(1)(a) GDPR) – to send newsletters or promotional emails you’ve signed up for.
• You can unsubscribe at any time from any email you receive, or by request.
• Consent process: I use a double opt-in system, meaning you confirm your subscription via email before receiving any marketing messages.
• Data protection: Campaign Monitor acts as my data processor and complies with GDPR standards.

More info: Campaign Monitor privacy policy.

Subscriber data (Zapier)

Product updates

• When you purchase a product, you will be added to a mailing list in Campaign Monitor (see above) for updates related to your purchase. These may include new course materials, important announcements, or follow-ups.
• Lawful basis: Performance of a contract (Art. 6(1)(b) GDPR) – to add value to a product you purchased.

Email marketing

• You may also be optionally added to my main email list for newsletters or promotions — only if you’ve opted in.
• Lawful basis: Consent (Art. 6(1)(a) GDPR) — to keep you informed about your purchase and relevant updates.

You can unsubscribe at any time from any email you receive, or by request.

Data protection: Zapier acts as a data processor to facilitate this transfer, and all services comply with GDPR requirements.

More info: Zapier privacy policy.

Payment processing (Stripe)

I use Stripe to securely process payments for courses or other paid services.

• What data is shared: payment details (card info, billing address, email) required to complete transactions.
• Lawful basis: Performance of a contract (Art. 6(1)(b) GDPR) – to process and manage your payments.
• Data protection: Stripe acts as a data processor and complies with GDPR requirements.
• I do not store your credit card or payment details on my servers — Stripe handles all payment information securely.

More info: Stripe privacy policy.

Website analytics (Plausible)

I use Plausible Analytics to see how the site is being used, but here’s the good news: no cookies, no tracking, and no personal data. Only anonymous visit statistics like page views and device types are collected.

Lawful Basis: Legitimate interest (Art. 6(1)(f) GDPR) — to understand and improve the site.

More info: Plausible privacy policy.

External Links

Sometimes this site links to other websites. Obviously, I can’t control what happens over there, so I’m not responsible for their content or practices. If you visit them, please refer to their respective privacy policies.