Privacy Policy

What we collect when you browse or buy, why, and how to have it deleted. Last updated September 2026.

1. Who is responsible

GHLExpertly operates this store and is the data controller for the information described here. Contact: [email protected].

2. What we collect

· Name, email and billing address when you place an order — to take payment, deliver the product and issue a receipt.

· Order history — to provide support and handle refunds.

· Your message and contact details if you use the contact page — to reply to you.

· Basic, aggregate analytics about which pages are visited — to see what is useful.

Card numbers are handled by our payment provider and never reach our systems.

3. Why we are allowed to hold it

· To perform the contract you entered into when you bought something.

· To meet legal obligations, including keeping tax records.

· For our legitimate interest in understanding traffic in aggregate and preventing fraud.

4. Who else processes it

HighLevel (store, checkout and email), our payment provider (payments and invoices) and our hosting provider (serving pages and request logs). We do not sell personal data and we do not share it for anyone else's advertising.

5. Marketing email

We only email you about the order you placed, unless you opt in to more. Every marketing email carries an unsubscribe link that works immediately.

6. Cookies

The store sets the cookies it needs to keep your cart and your session working. If analytics is enabled it sets a first-party cookie to count a visit once. Blocking non-essential cookies does not break checkout.

7. How long we keep it

· Order and invoice records: as long as tax law requires, typically seven years.

· Support correspondence: 24 months.

· Enquiries that do not become orders: 24 months.

8. Your rights

Ask for a copy of what we hold, ask us to correct it, ask us to delete it, or ask us to stop emailing you. Email [email protected] and we will act within 30 days, free of charge. If you are in the UK or EU you may also complain to your data protection authority; if you are in California, the CCPA/CPRA rights apply and there is no sale of personal information to opt out of.

9. Security and transfers

Access is limited to the people who need it and credentials are stored in a password manager. Our vendors may process data in the United States; where the law requires a transfer mechanism, their standard contractual clauses apply.