Privacy Policy
Last updated: June 27, 2026
DigitalChiselCo ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you visit digitalchiselco.com (the "Site") or make a purchase.
1. Data Controller
The data controller responsible for your personal data under this policy is Khalid Khattak, sole proprietor trading as DigitalChiselCo, based in Pakistan. For any data-related question or request, contact jolly@digitalchiselco.com.
When you make a purchase, our payment provider Paddle.com Market Ltd acts as a separate independent controller for the billing and tax data it collects, as our Merchant of Record. See Paddle's privacy policy at paddle.com/privacy.
2. Information We Collect
Information you provide
- Account and checkout: name, email address, and billing country. Payment card details are entered directly into Paddle's secure checkout — we never see or store card numbers.
- Newsletter and free-pack signup: email address and (optionally) first name when you subscribe.
- Membership lead form: name, email, and selected plan.
- Contact form / support: any information you send when contacting us by email or via our contact page.
Information collected automatically
- Usage analytics: pages visited, time on page, referring URL, device type, and approximate location — collected by Google Analytics 4 (see section 3 below).
- Essential cookies: we set a small number of first-party cookies for cart functionality, your account session, and CSRF protection. No advertising cookies. No remarketing pixels.
- Server logs: standard request logs (IP address, user-agent, timestamp) kept for up to 30 days by our hosting provider for security and abuse-prevention purposes.
3. Sub-processors and Third-Party Services
We share the minimum data necessary with the following sub-processors. Each is bound by a Data Processing Agreement or industry-standard contract.
| Provider | Purpose | Data |
|---|---|---|
| Paddle.com Market Ltd (UK) | Payment processing, Merchant of Record, tax/VAT/GST handling, fraud prevention, invoicing. | Name, email, billing address, card data (handled exclusively by Paddle). |
| Resend (US) | Transactional email delivery: order receipts, account sign-in, contact-form forwarding. | Name, email, email content. |
| MailerLite (Lithuania / EU) | Newsletter and free-pack delivery automations, opt-in management. | Name, email, signup source. |
| Supabase (US) | Database hosting (orders, accounts, content). SOC 2 Type II. | All Site data. |
| Netlify (US) | Web hosting, CDN, serverless functions. SOC 2 Type II. | Request logs. |
| Google Analytics 4 (US, by Google LLC) | Aggregated usage analytics — pages visited, traffic sources. IP addresses are anonymised by Google before storage. | Cookie identifier, page URL, approximate geolocation, device type. |
4. How We Use Your Information
- Process and fulfill your orders and deliver download links.
- Send order confirmations, download access, and account sign-in links.
- Send promotional emails — only if you opted in. You can unsubscribe from any newsletter email at any time.
- Improve the Site, fix bugs, and understand usage patterns (Google Analytics).
- Detect and prevent fraud and abuse.
- Comply with legal obligations (tax, accounting, dispute response).
5. Sharing
We do not sell, rent, or trade your personal information. We share data only with the sub-processors listed in section 3, or when required by law, regulation, or valid legal process.
6. International Data Transfers
Because some of our sub-processors are located in the United States or the European Union, your personal data may be transferred to and processed in countries outside your country of residence. Where required, those transfers are protected by Standard Contractual Clauses or equivalent safeguards adopted by the respective processor.
7. Data Retention
- Account and order records: retained for as long as your account exists, and for a further 7 years after closure for accounting and tax reasons.
- Newsletter subscribers: retained until you unsubscribe.
- Contact-form messages: retained for up to 2 years for support history, then deleted.
- Server logs: up to 30 days.
- Google Analytics events: retained for 14 months, the default GA4 retention window.
8. Data Security
We use industry-standard security measures including HTTPS encryption, secure HttpOnly cookies, hashed passwordless authentication, and row-level database security. No method of transmission over the internet is 100% secure, but we work to protect your data with the same care we expect for our own.
9. Your Rights
Depending on your country of residence, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (subject to legal retention obligations).
- Object to or restrict certain processing.
- Receive your data in a portable format.
- Withdraw consent for marketing emails by clicking "unsubscribe" in any email, or by emailing us.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email jolly@digitalchiselco.com. We respond within 30 days.
10. Cookies
We use a small number of first-party cookies and one third-party analytics cookie set by Google Analytics 4. Specifically:
cart(localStorage) — your shopping cart between page loads.dcc_account— your signed-in session on the account dashboard. HttpOnly, Secure, SameSite=Lax._gaand_ga_*— Google Analytics measurement. Set by Google's gtag.js library loaded from googletagmanager.com.
You can disable analytics by enabling your browser's Do Not Track or by using a tracking-blocking extension. Essential cookies cannot be disabled without breaking core Site functionality.
11. Children's Privacy
Our Site is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete the record.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be highlighted at the top of the page for 30 days after they take effect.
13. Contact
Questions about your privacy or this policy? Email jolly@digitalchiselco.com or use the contact page.