The Calm & Confident Sisterhood

1. Who we are

This Privacy Notice describes how Sherrie Mechoso, operating under the name The Calm and Confident Sisterhood ("we", "us", "our"), collects, uses, and protects personal data about you. We act as the data controller for the personal data described below.

2. Personal data we collect

Account & contact: name, email address, login credentials.
Communications: support messages, survey responses, and feedback you send us.
Usage & device data: pages viewed, actions taken in the product, browser type, device identifiers, IP address, and approximate location derived from IP.
Marketing preferences: waitlist signup, email subscription status.

Payment data (such as card details) is collected directly by our payment provider, Paddle, and is not stored by us.

3. How we use your data and legal basis

Provide the Service — creating your account, delivering ebook and audio content. Legal basis: contract performance.
Customer support — answering your questions. Legal basis: contract performance / legitimate interests.
Security and fraud prevention — protecting our service and users. Legal basis: legitimate interests / legal obligation.
Product improvement and analytics — understanding how the Service is used. Legal basis: legitimate interests.
Marketing communications — sending updates and offers where you've opted in. Legal basis: consent (you can withdraw at any time).
Legal compliance — meeting tax, accounting, or regulatory obligations. Legal basis: legal obligation.

4. Who we share your data with

Merchant of Record — Paddle: we share order and customer data with Paddle.com for the sale of our products, subscription management, payments, tax compliance, invoicing, and refunds.
Service providers / subprocessors: hosting, database, email delivery, and analytics providers that help us operate the Service.
Professional advisers: accountants and legal advisers, where necessary.
Authorities: when required by law, court order, or to protect our rights.

5. International transfers

Where data is transferred outside your country of residence, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions where applicable.

6. Data retention

We retain personal data only as long as needed to provide the Service and to meet legal, tax, and accounting obligations. When no longer needed, data is deleted or anonymized.

7. Your rights

Depending on your jurisdiction, you may have the right to: access your data, request correction or deletion, restrict or object to processing, request portability, and withdraw consent. EU/UK residents also have the right to lodge a complaint with their local data protection authority. We aim to respond within one month.

8. Security

We use appropriate technical and organizational measures — including encryption in transit, access controls, and secure hosting — to protect your personal data.

9. Cookies

We use essential cookies needed for the Service to function, and may use limited analytics cookies to understand usage. You can manage cookie preferences via your browser settings.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them.

11. Changes to this notice

We may update this Privacy Notice. Material changes will be communicated through the Service or by email.

12. Contact

For privacy questions or to exercise your rights, contact us through the support channel in your purchase confirmation. For order-related personal data handled by Paddle, you can also contact Paddle via paddle.net.