What I collect
When you submit a form, I receive the details you enter: typically your name, work email, organisation and message. When you buy the book, the order record holds your name, email, country and tier, the amount and currency, the payment provider's transaction ID, the licence type, and the company name for an institutional licence.
Why, and the lawful basis
Form details are used to reply to you and, where relevant, to follow up about the work you asked about. Order data is processed to fulfil your purchase and to let you recover your download later. For buyers in the European Union, the lawful basis is performance of the contract (fulfilling your purchase) and, for enquiries, my legitimate interest in responding to you.
What I do not do
I do not store card details; the payment provider holds them. I do not sell your data. The newsletter is run on Substack under its own terms; subscribing there is your choice.
Cookies and analytics
Analytics and advertising measurement run only if you say yes. A small banner asks whether I may use Google Analytics 4 and LinkedIn's Insight Tag. If you click Accept, Google Analytics sets its cookies (named _ga and _ga_ followed by an ID) to count visits and show which pages are read and which forms are sent; Google Analytics 4 does not store your IP address. LinkedIn's Insight Tag sets LinkedIn's own cookies so I can see, in aggregate, what kind of LinkedIn members visit and show relevant posts to them. If you click Decline, or simply ignore the banner, neither one loads and neither sets a cookie.
The lawful basis is your consent. Google and LinkedIn process this data under their own terms and may transfer it outside your country, including to the United States, under the safeguards they publish. Google Analytics data is kept for 14 months and then deleted. I do not use it to identify you and I do not join it to what you type into a form.
Your choice is kept in your browser for 12 months, as an entry called tb_consent that holds no personal data, so the banner does not keep asking. You can change it at any time with the button below, or by clearing this site's data in your browser.
Apart from that, the only thing kept on your device is a short-lived functional entry that signs me in to the private admin area, which ordinary visitors never reach. When you pay for the book, the payment provider may set cookies it needs to process that transaction. Nothing from the scheduling tool loads on this site. The booking button sends you to Microsoft Book with me, where you pick a slot, and Microsoft runs that page under its own privacy terms. If you would rather not use it, email me and we'll arrange a call another way.
Retention and your rights
Order records are kept so you can always recover your purchase. Enquiry data is kept while it is useful to our conversation. You can ask me to access, correct or delete your data by writing to info@trustbridge-compliance.com.
TrustBridge Compliance, India. Contact: info@trustbridge-compliance.com.