Privacy Notice

1. Information we collect

• Contact details — name and email address you provide at checkout or when contacting us.
• Order information — products purchased, order date and download history. Card details are processed by Paddle and never reach us.
• Support communications — the content of any emails or messages you send us.
• Technical & usage data — IP address, device and browser type, pages visited and approximate location, collected automatically by our hosting and analytics tools.
• Cookies and similar technologies — small files used to keep the site working and to understand how it is used (see section 7).

2. How we use your information and our legal basis

• To fulfil your order — delivering files, sending receipts and download links (performance of a contract).
• To provide customer support — answering questions and resolving issues (legitimate interests / contract).
• To keep the Service safe — preventing fraud, abuse and security incidents (legitimate interests, legal obligation).
• To improve the Service — understanding which pages and products are useful (legitimate interests).
• To send occasional updates — only if you have opted in, and you can unsubscribe at any time (consent).
• To meet legal and tax obligations — keeping records as required by law (legal obligation).

3. Who we share information with

We never sell your personal information. We share it only with:

• Paddle — our Merchant of Record, which processes payments, handles subscriptions, charges tax and issues invoices. Paddle is an independent controller of the payment data it collects. See Paddle's Privacy Policy.
• Hosting and infrastructure providers — for serving the site and storing files.
• Email delivery providers — to send receipts, download links and support replies.
• Analytics providers — to understand site usage (aggregated where possible).
• Professional advisers — accountants and lawyers, on a confidential basis.
• Authorities — where required by law, court order or to protect our legal rights.

4. International transfers

Some of our providers (including Paddle) are located outside Australia, including in the United States, United Kingdom and European Economic Area. Where personal information is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

5. How long we keep information

We keep your information only for as long as needed for the purposes described above — typically the life of your account plus the period required by Australian tax and record keeping laws (generally 5–7 years for transactional records). After that we delete or anonymise it.

6. Your rights

Depending on where you live, you have the right to:

• access the personal information we hold about you;
• ask us to correct information that is inaccurate or out of date;
• ask us to delete information we no longer need to keep;
• object to or restrict certain uses of your information;
• request a portable copy of information you provided;
• withdraw consent at any time (without affecting prior processing);
• complain to a supervisory authority — in Australia, the Office of the Australian Information Commissioner (OAIC); if you are in the EEA or UK, your local data protection authority.

To exercise any of these rights, email hello@slowgrowndigital.com. We aim to respond within 30 days.

7. Cookies

We use a small number of cookies and similar technologies. Essential cookies keep the site working (for example, remembering your checkout session). Analytics cookies help us see which pages are useful. Paddle's checkout sets its own cookies needed to process your payment. You can control cookies through your browser settings; blocking essential cookies may break parts of the site.

8. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls and reputable service providers — to protect your information. No method of transmission or storage is perfectly secure, but we work to reduce risk and respond promptly to any incident.

9. Children

Our products are not directed at children under 16, and we do not knowingly collect personal information from them.

10. Changes to this Notice

We may update this Notice from time to time. The "Last updated" date at the top reflects the current version. Material changes will be communicated where appropriate.

11. Contact

Questions about this Notice or how we handle your information? Email hello@slowgrowndigital.com.