Privacy Notice

Blackdial Marketing is the data controller for personal data used to operate the Above the Net website, deliver the training PDF and manage customer orders. This notice describes our processing. Stripe provides checkout and handles payment-related data under its own Privacy Policy.

• Orders and delivery: buyer email, payment transaction reference, amount, currency, price tier, order date and paid or refunded status. We use these to fulfil purchases, verify PDF access, handle refunds and keep accounting records.
• Site usage: a randomly generated visitor identifier, pages viewed, button clicks, checkout starts, purchase and refund events, timestamps, referring page and campaign tags (UTM source, medium and campaign). We use these first-party records to understand traffic, sales and checkout completion.
• Accounts: email, authentication identifiers and credentials handled by our authentication service, including identity details supplied when you choose Google sign-in. These enable secure owner-dashboard access; buying the PDF does not require creating an account.
• Technical and support information: hosting and authentication services may process IP addresses, device or browser information and security logs to operate and protect the service. If you contact us, we process the information you provide to answer your request.

We do not store your full card details. We do not use third-party advertising trackers or sell personal data.

We process order and delivery data to perform our contract with you; accounting records to meet legal obligations; and security, customer support and proportionate first-party analytics for our legitimate interests in operating, protecting and improving the service. Where consent is required for storage or other processing under applicable law, consent is the legal basis and may be withdrawn. We do not use these records for automated decisions that produce legal or similarly significant effects.

We share necessary information with service providers for hosting, private file storage, authentication and operational support, including Lovable Cloud. Google receives information when you choose its sign-in service. Stripe receives purchase information for product sales, payments, refunds, tax compliance and invoicing; this product has no subscription.

We may also share necessary information with professional legal or accounting advisers and with authorities where required by law. Access to our sales and visitor records is restricted to the authorised owner.

Order, transaction and refund records are retained for the applicable accounting, tax, dispute and legal limitation periods. Account data is retained while the account is needed. Usage, security and support data is retained only while reasonably necessary for the purposes above. Applicable periods vary by legal obligation and type of record; data will be deleted or anonymised when no longer needed, subject to lawful retention requirements.

Essential authentication cookies or browser storage keep account users signed in. We use local storage for a random first-party visitor identifier and a payment-session reference in the confirmation URL so the confirmation page can locate a purchase. The visitor identifier supports first-party analytics, not cross-site advertising. There are no third-party marketing cookies added by us.

You can manage or clear cookies, local storage and session storage in your browser settings. Blocking essential storage may affect sign-in or purchase confirmation. Stripe's checkout and Google sign-in may use their own cookies or storage, governed by their privacy notices.

We use appropriate technical and organisational safeguards, including encrypted connections, restricted owner access and private PDF storage with time-limited download links. No online service can guarantee absolute security.

Our providers may process information outside your country. Where UK or EEA data-protection laws apply, transfers requiring safeguards must rely on an appropriate mechanism, such as an adequacy decision or standard contractual clauses, as applicable.

Depending on applicable law, you may request access to, correction or deletion of your personal data, restrict or object to processing, request portability, and withdraw consent without affecting processing already lawfully undertaken. Contact Blackdial Marketing to exercise these rights, identifying your purchase or account and the right you wish to exercise. We may need to verify your identity and retain records required by law.

Where UK or EEA law applies, we generally respond within one month, subject to lawful extensions, and you may complain to your relevant data-protection supervisory authority. Other local privacy and consumer rights remain unaffected. For payment-related data requests, see Stripe’s privacy resources.

We may update this notice when our practices or legal requirements change. The effective date above identifies the current version.