Privacy Policy.
What we collect, why, who processes it, and the choices you have. We keep data collection to the minimum needed to deliver what you asked for.
This Privacy Policy explains how Mastersmith (“we”, “us”, “our”) handles information about you when you use our website and Services. By using the Services, you agree to this Policy. If you do not agree, please do not use the Services. This Policy should be read together with our Terms of Service.
1. Information we collect
We aim to collect as little as possible. Depending on how you use the Services, we may collect:
- Email address — when you request a free guide, buy a product, or contact us, so we can deliver your files and communicate with you.
- Order and purchase details — the products you buy, amounts, currency, timestamps, and payment/order identifiers returned by our payment provider (we do not receive or store your full card number or bank credentials).
- Booking details — if you book a call, information you provide to our scheduling provider (such as your name, email, and chosen time).
- Technical and usage data — limited information such as your approximate region, browser type, and basic interaction data, which may be handled by our hosting and analytics providers to keep the site secure and working.
- Anything you voluntarily send us — for example, the content of emails you write to us.
We do not intentionally collect sensitive personal data, and we ask that you do not send us any (such as government identifiers, health, or financial account details) except where strictly needed.
2. How we use your information
We use your information to: deliver the products, files, and sessions you request; process and confirm payments; send transactional messages (receipts, download links, booking confirmations); respond to your enquiries; maintain the security and integrity of the Services; comply with legal obligations; and, only if you have opted in, send occasional updates. We do not sell your personal data.
3. Legal bases
Where applicable law (such as the GDPR) requires a legal basis, we rely on: performance of a contract (to deliver what you purchased), consent (for example, marketing emails or the free guide, which you can withdraw at any time), legitimate interests (to run and secure the Services), and legal obligation (for example, tax and accounting records).
4. Third-party processors we rely on
We use trusted third parties to run the Services. Each processes data only as needed and under its own terms and privacy policy:
- Razorpay — payment processing.
- Calendly — scheduling of one-to-one calls.
- Email delivery provider — sending your files, receipts, and confirmations.
- Hosting and database providers (including our hosting platform and Supabase) — running the site and securely storing order and delivery records.
We are not responsible for the independent practices of these third parties; we encourage you to review their privacy policies.
5. Cookies and similar technologies
We use only the cookies and local storage needed for the site to function — for example, to remember your selected region or the tools on your bench. Third-party providers (such as the payment and scheduling embeds) may set their own cookies when you interact with them. You can control cookies through your browser settings, though some features may not work without them.
6. Data retention
We keep personal data only as long as necessary for the purposes described here — for example, to deliver your purchase, provide support, and meet legal, tax, and accounting requirements — after which we delete or anonymise it. Download links are time-limited by design.
7. Data sharing and disclosure
We share personal data only with the processors above, or where required to comply with law, enforce our Terms, protect our rights or the safety of others, or in connection with a business transfer. We do not sell or rent your personal data to third parties.
8. International transfers
Your information may be processed in countries other than your own, including where our providers operate. Where required, we take reasonable steps so that transfers have an appropriate legal basis and safeguards.
9. Your rights
Depending on where you live, you may have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any right, contact us using the details below; we will respond as required by applicable law. You may also unsubscribe from marketing emails at any time using the link in those emails.
10. Security
We use reasonable technical and organisational measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You use the Services at your own risk and are responsible for keeping your own copies of delivered files and any access links safe.
11. Children
The Services are intended for adults (18+) and are not directed at children. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
12. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date shows the latest version. Material changes will be reflected here; continued use after changes take effect means you accept the updated Policy.
13. Contact
Questions or requests about your data? Contact us at mastersmithadmin@gmail.com.
To the extent permitted by law, Mastersmith disclaims liability for any loss or harm arising from the acts, omissions, or data practices of third-party providers, or from your own handling of files and access links. Please also review our Terms of Service.