Privacy Notice

1. Who we are

Maura Avery, publishing under the name Maura Leigh, is the data controller for personal data collected through this website. You can reach us at mauraavery02@gmail.com.

2. What we collect and why

• Order and contact details (name, email address, country, order reference) — to fulfil your purchase, deliver your download links, and answer support requests. Legal basis: performance of a contract.
• Support messages you send us — to respond and keep a record of the issue. Legal basis: performance of a contract and our legitimate interests.
• Usage and device data (pages viewed, referring link, approximate region, browser and device type, IP address) — to understand which pages and links people use, keep the site secure, and improve the workbook. Legal basis: legitimate interests.

We do not see or store anything you write inside the workbook — the PDFs are yours and nothing you fill in is sent to us. We do not collect or store your card details; payment information is handled entirely by Paddle.

3. Who we share data with

• Paddle — our reseller and Merchant of Record, which processes the sale, payments, invoicing, tax compliance, and refunds.
• Service providers — hosting, content delivery, and analytics providers that operate the site on our behalf.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose by law.

We do not sell your personal data.

4. International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA, transfers rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.

5. Retention

Order and support records are kept for as long as needed to provide support and to meet tax and accounting obligations (typically up to seven years). Aggregated site analytics are kept for up to 26 months. After that, data is deleted or anonymised.

6. Your rights

Depending on where you live, you have the right to request access to your data, correction, deletion, restriction, portability, and to object to processing based on legitimate interests, as well as to withdraw consent where consent applies. Email mauraavery02@gmail.com and we will respond within one month. If you are in the UK or EEA you may also complain to your local data protection supervisory authority.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), limited access to order records, and reputable providers for payments and hosting.

8. Cookies and similar technologies

We use a small number of essential cookies and local storage entries so the site and checkout work, plus privacy-friendly analytics to count page views and see which link brought you here. Paddle sets its own cookies during checkout. You can clear or block cookies in your browser settings; essential functions such as checkout may not work if you block them.

9. Children

This site is not directed at children under 16, and we do not knowingly collect their personal data.

10. Changes and contact

We will update this notice when our practices change, with the date shown at the top of the page. Questions: mauraavery02@gmail.com. See also our terms and refund policy.