This Privacy Notice explains how Eric Hensley (the "Seller", "we", "us") collects, uses, and shares personal data when you visit getsalesspark.com or purchase the Solo Founder Sales Playbook (the "Service"). Eric Hensley operates as a sole individual, not a registered business entity, and acts as the data controller for personal data processed in connection with the Service.
1. Personal data we collect
- Contact details — name and email address you provide at checkout or when contacting support.
- Order information — the product purchased, order ID, transaction ID, amount, currency, and download history.
- Support messages — the content of any email you send us.
- Technical data — IP address, browser type, device identifiers, and basic usage telemetry needed to serve the site, prevent abuse, and diagnose errors.
- Cookies and similar technologies — essential cookies required to keep the site working. We do not run advertising cookies.
Payment card details are collected and processed by Paddle (see "Sharing with Paddle" below); we never see or store your full card number.
2. Why we use your data and legal basis
- Provide the Service (contract): deliver the playbook, send the receipt, generate download links, and respond to support requests.
- Fraud prevention and security (legitimate interests): detect abuse, rate-limit resend requests, and protect the site.
- Product improvement (legitimate interests): aggregated analytics about how the site is used.
- Legal obligations (legal obligation): tax records and responding to lawful requests from authorities.
- Transactional email (contract / legitimate interests): receipts, payment-failure notices, and download recovery emails. We do not send marketing email unless you separately opt in.
3. Sharing with Paddle (Merchant of Record)
Paddle.com Market Ltd ("Paddle") acts as the Merchant of Record for every order placed on this site. When you check out, Paddle collects and processes your payment information, billing address, and tax data, issues the invoice, and handles refunds and chargebacks. Paddle is an independent data controller for that payment data. See Paddle's privacy notice at paddle.com/legal/privacy.
4. Other recipients of your data
- Hosting and backend providers — Lovable Cloud (Supabase, Cloudflare) host the site, database, and download files.
- Email delivery — transactional email provider used to send receipts and recovery links.
- Professional advisers — accountants or legal advisers, where required.
- Authorities — where required by law, court order, or to protect our rights.
We do not sell your personal data.
5. International transfers
Our hosting and email providers may process data in the United States and the European Economic Area. Where data leaves the UK or EEA, transfers rely on appropriate safeguards (such as the EU Standard Contractual Clauses or equivalent adequacy mechanisms operated by the relevant provider). Paddle handles its own international transfers under its privacy notice.
6. Data retention
- Order records: retained for at least 7 years to meet tax and accounting obligations.
- Support messages: up to 3 years from last contact, then deleted or anonymised.
- Technical logs: typically 30–90 days.
- Email suppression list: retained indefinitely so unsubscribed addresses are not re-contacted.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict, port, or object to our processing of your personal data, and to withdraw consent at any time. UK and EEA users have these rights under the UK GDPR and GDPR and may complain to their local data protection authority. To exercise any right, email support@getsalesspark.com. We respond within one month.
8. Security
We use appropriate technical and organisational measures, including encryption in transit (HTTPS), encryption at rest for the database, access controls, and signed download links with limited validity.
9. Cookies
We use essential cookies needed for the site to work (for example, to keep the checkout session alive). We do not currently run advertising cookies. If we add analytics that use cookies in future, this notice will be updated and you will be able to manage preferences in your browser.
10. Children
The Service is not directed to children under 16 and we do not knowingly collect their personal data.
11. Changes to this notice
We may update this Privacy Notice from time to time. Material changes will be reflected by updating the "Last updated" date above.
12. Contact
Data controller: Eric Hensley.
Email: support@getsalesspark.com