We collect as little as we can get away with, and we never sell any of it. Here is exactly what that means.
On this page
The short version
We collect your name and email so we can send you what you bought and answer you if you write. Your card details go straight to our payment processor and we never see them. We don't sell your data, we don't share it for advertising, and you can ask us to delete it at any time.
The rest of this page is the detail behind that paragraph, because you're entitled to it and because the law requires us to spell it out.
Who is responsible for your data
The data controller is Atlas Code LLC, 1209 Mountain Road PL NE, Ste R, Albuquerque, NM 87110, USA. That means we decide what is collected and why, and we're the ones you can hold to account for it.
For any privacy question or request, write to hello@stillcrane.com with "Privacy" in the subject line.
What we collect, and why
- Your name and email address
- Given by you at checkout. Used to deliver your purchase, send the receipt, and reply if you contact us. Without it we literally cannot send you what you paid for.
- Order details
- Which plan, when, how much, and the currency. Used for our accounts, for tax, and so we can find your order when you write to us.
- Payment information
- Handled entirely by our payment processor. We never receive your full card number, expiry date or security code. We see only whether the payment succeeded and the last four digits, for matching orders.
- Messages you send us
- Whatever you write in an email, kept so we have the history of a conversation if it continues.
- Basic website analytics
- Which pages were visited and roughly where from, in aggregate. Used to understand what's working on the site. This is not tied to your name.
We do not collect health information, and we ask you not to send us any. If you write to us about a medical condition, we'll answer the general question and delete the detail.
The legal basis for each use
- Performing our contract with you delivering the plan, sending the receipt, handling a refund. Without this we can't complete the sale.
- Legal obligation keeping sales and tax records for the period our accounting rules require.
- Legitimate interests answering support email, keeping the site secure, and understanding aggregate traffic. We've weighed these against your privacy and think they're uncontroversial.
- Consent if you ever opt in to a newsletter. You can withdraw it with one click, and withdrawing has no effect on your purchase.
How long we keep things
- Order records
- For as long as our tax and accounting rules require typically six to seven years from the end of the financial year.
- Your account email and download access
- For as long as you have access to what you bought, so we can resend a link years later if you need it.
- Support emails
- Two years, then deleted.
- Analytics
- Aggregate figures only, kept indefinitely; nothing in them identifies you.
Your rights
Depending on where you live, you have some or all of the following. We apply them to everyone, wherever you are, because it's simpler and fairer:
- Access ask for a copy of what we hold about you
- Correction have anything wrong put right
- Deletion ask us to erase your data, except records we're legally required to keep
- Portability receive your data in a machine-readable file
- Objection and restriction tell us to stop a particular use
- Withdraw consent unsubscribe at any time
- Complain to your national data protection authority, if we've got it wrong
Email hello@stillcrane.com and we'll respond within 30 days, usually much sooner. We won't charge you and we won't make you explain why.
Where your data is stored
Our suppliers may store or process data outside your country, including in the United States. Where that happens, transfers are covered by the safeguards the law provides standard contractual clauses or an equivalent approved mechanism.
Children
This site isn't aimed at children and we don't knowingly collect data from anyone under 16. If you believe a child has given us their details, write to us and we'll delete them.
Security
The site runs over an encrypted connection, access to order data is limited to the people who need it, and card details never reach our systems at all.
No system is perfect. If a breach ever affected your data, we'd tell you and the relevant authority within the timeframe the law sets, and we'd tell you what we were doing about it.
Changes to this policy
If we change how we handle data, this page changes and the date at the top updates. For anything significant, we'll email the people affected rather than rely on you noticing.
Questions: hello@stillcrane.com.