Privacy Notice

1. Who we are

This site and the digital products offered on it (the "Service") are operated by Sara Soltani ("we", "us", "our"), trading as hairbysoltani. Sara Soltani is the data controller for personal data collected through the Service.

2. Data we collect

• Contact details — name and email address you provide at checkout or when contacting us.
• Order details — the product purchased, transaction identifier, currency, and amount.
• Support messages — the contents of any email you send us.
• Usage and device data — IP address, browser type, pages viewed, and similar telemetry gathered automatically when you visit the site.

Payment card details are collected directly by our reseller Paddle and are not stored by us.

3. Why we use it and legal basis

• To fulfil your order (delivering the ebook, sending download links) — performance of a contract.
• To provide customer support — legitimate interest in responding to your enquiries.
• To secure the Service and prevent fraud — legitimate interest in protecting our business and customers.
• To comply with legal obligations — tax, accounting, and consumer-protection records.
• To improve the Service — aggregated usage analytics under our legitimate interest.

4. Who we share data with

• Paddle, our Merchant of Record, for order processing, payments, tax compliance, invoicing, and refund handling.
• Hosting, email, and storage providers that operate our infrastructure on our behalf as processors.
• Professional advisers (legal and accounting) where reasonably necessary.
• Authorities where we are required to do so by law.

We do not sell your personal data.

5. International transfers

Our providers may process data outside your country of residence, including in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. How long we keep data

We keep order records for as long as required by tax and accounting law (typically 6–10 years). Support correspondence is retained for up to 3 years. Usage analytics are retained in aggregated form. When data is no longer needed, it is deleted or anonymised.

7. Your rights

Subject to applicable law you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consent. You may also lodge a complaint with your local data protection authority. To exercise any of these rights, contact us at the address in section 10.

8. Security

We use appropriate technical and organisational measures — including transport encryption, access controls, and vetted service providers — to protect personal data against unauthorised access, loss, or alteration.

9. Cookies

We use strictly necessary cookies to make the site work (for example to keep your checkout session). We may also use privacy-respecting analytics to understand aggregate usage. You can control cookies through your browser settings.

10. Contact

For any privacy question or to exercise your rights, contact Sara Soltani via the email address shown on our home page. For payment or billing enquiries, Paddle handles customer service on our behalf at paddle.net.