Draft. This text is a template and must be reviewed by a qualified lawyer before the site goes live. Items in [square brackets] need to be confirmed or filled in.
Privacy Policy
Last updated: [date]
This policy explains what personal data [legal name of the seller] (“Teesha”, “we”) collects when you visit this site and take the Course, why, and what your rights are. Contact for any privacy question: hello@myteesha.com.
1. Data we collect
- Purchase data. Payment is handled by Lemon Squeezy, our merchant of record. Lemon Squeezy collects your name, email, billing country and payment details under its own Privacy Policy. We receive your name, email, country, order details and the campaign tags described below. We never see your full card number.
- Course data. Your email address and which lessons and check-ins you open or tap, so we can send the right lesson and show your streak.
- Photos. [Confirm how before/after photos work — e.g. “Photos you take stay on your device; we only receive a photo if you choose to email it to us.”]
- Site analytics. We use Vercel Web Analytics, which measures page views and button clicks in aggregate without cookies and without identifying you personally.
- Campaign tags. If you arrive via a link with UTM tags (for example, from TikTok or Instagram), we pass the source and campaign name to checkout so we know which channel works.
- Emails you send us, e.g. support or refund requests.
2. Why we use it (legal bases)
- To deliver the Course you bought and provide support — performance of a contract.
- To measure and improve the site and our marketing — our legitimate interests.
- To keep records required for tax and accounting — legal obligation.
- To send optional news or offers — only with your consent, and you can unsubscribe at any time.
3. Who we share it with
We do not sell your personal data. We share it only with service providers who help us run the Course:
- Lemon Squeezy — payments, tax and invoicing (merchant of record).
- [Email delivery provider, e.g. …] — sending lessons and check-ins.
- Vercel — website hosting and cookieless analytics.
We may also disclose data if required by law.
4. International transfers
Our providers may process data outside your country, including in the United States. Where required, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses.
5. How long we keep it
We keep Course data while you have access and for [12 months] after your last activity, and purchase records for as long as tax law requires (typically [6–10] years). Then we delete or anonymise it.
6. Your rights
Depending on where you live (for example, under the EU/UK GDPR or California privacy law), you may have the right to access, correct, delete or export your data, to object to or restrict certain processing, and to withdraw consent. We do not sell or “share” personal data for cross-context behavioural advertising. To use any of these rights, email hello@myteesha.com. You may also complain to your local data protection authority.
7. Children
The Course is intended for adults. We do not knowingly collect data from children under 16.
8. Security
We use reputable providers and reasonable technical and organisational measures to protect your data.
9. Changes
We will post any changes on this page and update the date above.
10. Controller
[Legal name], [postal address] · hello@myteesha.com
Draft. Must be reviewed by a qualified lawyer before launch.