Section 01

Introduction & Our Commitment

At AI Mastery, we are committed to protecting your privacy and handling your personal information with transparency, care, and respect. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices you have.

This policy applies to all personal information collected through our website, digital products, email communications, and any other services we provide.

πŸ”’
Our core promise: We will never sell, rent, or trade your personal information to any third party for their marketing purposes. Your data exists to help us serve you β€” nothing else.

By using our website or purchasing our products, you acknowledge that you have read and understood this Privacy Policy. Questions? Contact us anytime.

↑ Back to top
Section 02

Information We Collect

We collect only the minimum information necessary to provide our services, process your purchases, and communicate with you.

Data TypeWhat SpecificallyWhy Collected
IdentityFirst name, last nameOrder personalisation, support
ContactEmail addressDelivery of purchase, communication
PurchaseOrder details, transaction IDFulfilment, refunds, tax records
PaymentPayment confirmation only (no card numbers)Purchase verification
TechnicalIP address, browser type, device typeSecurity, analytics, troubleshooting
UsagePages visited, time on site (anonymised)Improving website and products
VoluntaryFeedback, support messagesProduct improvement, support
βœ…
What we do NOT collect: Full payment card details (handled entirely by Stripe/PayPal), sensitive personal data such as health information, national ID numbers, or any data about children under 13.
↑ Back to top
Section 03

How We Use Your Information

Primary Purposes

  • Order fulfilment: Sending your purchased ebook download links immediately after purchase
  • Payment processing: Verifying transactions and processing refund requests
  • Customer support: Responding to enquiries and troubleshooting issues
  • Legal & tax compliance: Maintaining purchase records as required by law

Secondary Purposes

  • Email marketing: Sending helpful content and promotions β€” only if you opted in
  • Product improvement: Analysing anonymised usage data to improve ebooks and website
  • Security: Detecting and preventing fraudulent transactions
🚫
What we will NEVER do: Sell, rent, or lease your personal information Β· Share your data with advertisers or data brokers Β· Send marketing emails without your explicit consent Β· Use your data for any unrelated purpose
↑ Back to top
Section 04

Data Protection

  • SSL/TLS Encryption: All data transmitted between your browser and our website is encrypted using 256-bit SSL/TLS encryption.
  • Secure Payment Processing: All payments are processed by PCI-DSS compliant processors (Stripe/PayPal). We never store or see your full card details.
  • Access Controls: Access to personal data is strictly limited to authorised personnel who need it to perform their job functions.
  • Secure Hosting: Our website and data are hosted on secure, regularly updated servers with firewall and intrusion detection protections.
  • Regular Security Reviews: We periodically review and update our security practices to address emerging threats.
⚠️
While we implement rigorous security measures, no system is 100% impenetrable. In the event of a data breach affecting your personal information, we will notify you and relevant regulatory authorities as required by law within 72 hours.
↑ Back to top
Section 05

Third-Party Services

We work with a small number of trusted third-party providers. We only share the minimum data necessary for each provider to perform their specific function.

πŸ’³
Stripe β€” Payment Processing
Handles all card transactions. PCI-DSS Level 1 certified. We share name, email, and transaction amount only.
πŸ’°
PayPal β€” Alternative Payment
Optional payment method. We receive purchase confirmation data only.
πŸ“§
Email Service Provider
Used to deliver purchase confirmation emails and (with your consent) marketing communications. We share your name and email only.
πŸ“Š
Google Analytics β€” Website Analytics
Used to understand aggregate site usage. Data is anonymised β€” individual users cannot be identified. IP anonymisation is enabled.
ℹ️
We do not use advertising networks, retargeting platforms, or data brokers. We will never sell access to our customer list to any third party.
↑ Back to top
Section 06

Marketing & Email Communications

Transactional Emails (Always Sent)

  • Purchase confirmation and order receipt
  • Ebook download links
  • Refund confirmation notifications
  • Important policy updates affecting your purchase

Marketing Emails (Consent Required)

Marketing emails are sent only with your explicit consent. These include bonus resources, AI tips, new product announcements, and occasional offers.

βœ‰οΈ
Unsubscribing is simple: Every marketing email contains a one-click unsubscribe link Β· You can also use our contact form to be removed manually Β· Removal takes effect within 48 hours
↑ Back to top
Section 07

Cookies & Analytics

Cookie TypePurposeEssential?
EssentialShopping cart, session management, securityYes
AnalyticsAggregated usage statistics (Google Analytics, anonymised)Optional
PreferencesRemembering your settingsOptional
PaymentSecure checkout session (Stripe/PayPal)Checkout only
πŸͺ
Analytics are anonymised. We use Google Analytics with IP anonymisation. We see aggregate statistics only and cannot identify individual visitors. We do not use advertising cookies or retargeting pixels.

You can manage or disable cookies through your browser settings. You can also opt out of Google Analytics via the Google Analytics Opt-out Add-on.

↑ Back to top
Section 08

Children's Privacy

Our products and services are intended for adults and are not directed at children under the age of 13 (or 16 in certain EU member states).

We do not knowingly collect personal information from children. If we become aware we have collected data from a child, we will:

  • Delete the information from our systems immediately
  • Cancel any associated purchase and issue a full refund
  • Notify the parent or guardian if contact information is available
πŸ‘¨β€πŸ‘©β€πŸ‘§
For parents and guardians: If you believe your child has provided us with personal information, please contact us immediately. We will investigate and delete the information promptly. We comply with COPPA and applicable international equivalents.
↑ Back to top
Section 09

Data Retention

Email address (marketing list)
Retained until you unsubscribe or request deletion
Until unsubscribed
Purchase records & transaction history
Required for tax, accounting, and legal compliance
7 years
Customer support communications
Retained to provide consistent support
3 years
Website analytics data
Anonymised aggregate data only
26 months
Server / access logs
Security monitoring and troubleshooting
90 days
πŸ—‘οΈ
Your right to deletion: Request deletion of your personal data at any time via our contact form. We'll delete all data we're not legally required to retain within 30 days and confirm in writing.
↑ Back to top
Section 10

Your Rights

πŸ‘οΈ
Right to Access
Request a copy of all data we hold about you. We'll respond within 30 days.
✏️
Right to Rectify
Request correction of inaccurate personal data we hold.
πŸ—‘οΈ
Right to Erasure
Request deletion of your data. We remove what we're not legally required to keep.
πŸ“€
Right to Portability
Receive your data in a portable, machine-readable format (e.g. CSV).
🚫
Right to Object
Object to processing for marketing β€” we will stop immediately.
βœ‰οΈ
Right to Unsubscribe
Opt out of all marketing instantly via any email's unsubscribe link.
βš–οΈ
Right to Complain
Lodge a complaint with your national data protection authority.
⏸️
Right to Restrict
Request that we limit how we use your data in certain circumstances.

To exercise any of these rights, use our contact form. We will respond within 30 days and never charge a fee for reasonable requests.

↑ Back to top
Section 11

GDPR Compliance

πŸ‡ͺπŸ‡Ί EU GDPR Compliant
πŸ‡¬πŸ‡§ UK GDPR Compliant

If you are in the EEA or UK, we process your personal data on the following lawful legal bases:

Processing ActivityLegal Basis
Processing your purchase & delivering productsPerformance of Contract (Art. 6(1)(b))
Sending transactional emails about your orderPerformance of Contract (Art. 6(1)(b))
Sending marketing emails (opted-in subscribers)Consent (Art. 6(1)(a))
Maintaining financial / tax recordsLegal Obligation (Art. 6(1)(c))
Website security and fraud preventionLegitimate Interests (Art. 6(1)(f))
βš–οΈ
To exercise your GDPR rights, use our contact form. You also have the right to lodge a complaint with your national supervisory authority (e.g. the ICO in the UK).
↑ Back to top
Section 12

CCPA Compliance

πŸ‡ΊπŸ‡Έ California CCPA Compliant

California residents have the following privacy rights under CCPA/CPRA:

  • Right to Know: Request information about the categories and specific pieces of personal information we've collected in the past 12 months.
  • Right to Delete: Request deletion of your personal information, subject to legal exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt-Out of Sale: Note: We do not sell personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any CCPA rights.
🚫
We do not sell personal information. We have not sold and do not sell the personal information of California residents to any third party.

To exercise your California rights, use our contact form. We will respond within 45 days as required by CCPA.

↑ Back to top
Section 13

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

  • Update the "Last Updated" date at the top of this page
  • For material changes β€” send an email notification to affected customers
  • For minor changes β€” update the page without individual notification

Your continued use of our services after the effective date constitutes acceptance of the updated policy.

↑ Back to top
Section 14

Contact Information

For any privacy-related questions, requests, or concerns, please use our contact form. We are committed to responding to all privacy enquiries promptly.

Privacy & Data Requests
Access, deletion, corrections
General Support
Account and purchase questions
Response Time
Within 30 days
Usually 24–48 hours
Legal Enquiries
GDPR, CCPA, legal notices
↑ Back to top
Section 15

Data Processing Details

Where Data Is Stored

Our website and primary data storage are hosted on servers located in [Your Server Region, e.g. United States / European Union]. Third-party providers may process data in their own infrastructure with appropriate safeguards applied.

Security Measures Summary

MeasureDetail
Encryption in transit256-bit TLS/SSL on all connections
Encryption at restDatabase encryption for stored personal data
Payment securityPCI-DSS compliant processors β€” we never handle card data
Access controlsRole-based access; minimal staff with data access
BackupsRegular encrypted backups stored securely
Security updatesPatches applied promptly; regular security reviews

Data Breach Notification

In the event of a data breach posing risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, as required by applicable law.

βœ…
Our commitment: We treat data security as an ongoing responsibility. We continuously review and improve our practices to maintain the trust you place in us when sharing your information.

Acknowledgement: By using our website or purchasing our products, you acknowledge that you have read this Privacy Policy. If you disagree with this policy, please discontinue use of our services and contact us to request deletion of any data we hold.

This Privacy Policy was last updated January 1, 2026. It forms part of our legal framework alongside our Terms of Service.

↑ Back to top