Privacy Notice

Who we are

Simple Cents Studio is operated by Simple Cents Studio. For personal data we collect through this website, Simple Cents Studio is the data controller.

What we collect and why

• Email address — for the newsletter, order receipts, and account access. Legal basis: consent (newsletter) and contract performance (purchases).
• Account credentials — if you create an account: email and a hashed password. Legal basis: contract performance.
• Purchase records — which ebook you bought, the transaction ID, and download tokens. Legal basis: contract performance and legal obligation (tax records).
• Support messages — anything you email us. Legal basis: legitimate interest in responding to you.
• Usage and device data — IP address, browser type, pages viewed, referrer. Legal basis: legitimate interest in operating a secure, working site.

Who we share it with

We share personal data only with service providers who help us run the site, and only for the purposes above:

• Paddle — our Merchant of Record. Paddle processes all payments, calculates tax, issues receipts, and handles refunds. See Paddle's privacy notice.
• Hosting and database — Lovable Cloud (which runs on Supabase infrastructure) hosts this site and stores account data.
• Email delivery — Resend delivers our transactional and newsletter emails.
• Authorities — if required by law.
• Professional advisers — accountants and lawyers when needed.

Retention

We keep purchase records for as long as tax law requires (typically 7 years). Newsletter subscriptions are kept until you unsubscribe. Support messages are deleted after 24 months. Everything else is anonymized or deleted when no longer needed.

Your rights

You have the right to access, correct, delete, restrict, or port your personal data, and to object to processing. To exercise any right, email hello@simplecentsstudio.com. If you are in the EU or UK, you also have the right to complain to your local supervisory authority.

Security

We use appropriate technical and organizational measures — encryption in transit, encrypted data at rest, access controls, and audit logs — to protect your data. No online service can promise perfect security, but we take it seriously.

Cookies

We use a small number of essential cookies to keep you signed in and to remember your preferences. We do not use marketing or third-party advertising cookies.

International transfers

Our providers may process data in the United States and the European Economic Area. Where data leaves the UK/EEA, we rely on standard contractual clauses or equivalent safeguards.

Contact

Privacy questions? Email hello@simplecentsstudio.com.