Privacy Policy
Last updated: October 15, 2026
DigitalChiselCo ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you visit digitalchiselco.com (the "Site") or make a purchase.
1. Data Controller
The data controller responsible for your personal data under this policy is DigitalChiselCo, an independently operated sole proprietorship. For any data-related question or request, including access, correction or erasure, contact jolly@digitalchiselco.com.
When you make a purchase, our payment provider Paddle (paddle.com) acts as a separate independent controller for the billing and tax data it collects, as our Merchant of Record. Depending on your country that is Paddle.com Inc. (United States), Paddle.com (Canada) Ltd. (Canada), or Paddle.com Market Limited, registered in England and Wales, company number 08172165. See Paddle’s privacy policy at paddle.com/privacy.
2. Information We Collect
Information you provide
- Account and checkout: name, email address, and billing country. Payment card details are entered directly into Paddle's secure checkout — we never see or store card numbers.
- Newsletter and free-pack signup: email address and (optionally) first name when you subscribe.
- Membership lead form: name, email, and selected plan.
- Cut Local alerts (optional): if you choose to get Cut Local job alerts by text message, your mobile phone number and the date you agreed; if you connect our Telegram bot, your Telegram chat ID. See Cut Local text alerts.
- Contact form / support: any information you send when contacting us by email or via our contact page.
Information collected automatically
- Usage analytics: pages visited, time on page, referring URL, device type, and approximate location — collected by Google Analytics 4 (see section 3 below).
- Essential cookies: we set a small number of first-party cookies for cart functionality, your account session, and CSRF protection. No advertising cookies. No remarketing pixels.
- Server logs: standard request logs (IP address, user-agent, timestamp) kept for up to 30 days by our hosting provider for security and abuse-prevention purposes.
3. Sub-processors and Third-Party Services
We share the minimum data necessary with the following sub-processors. Each is bound by a Data Processing Agreement or industry-standard contract.
| Provider | Purpose | Data |
|---|---|---|
| Paddle.com Market Ltd (UK) | Payment processing, Merchant of Record, tax/VAT/GST handling, fraud prevention, invoicing. | Name, email, billing address, card data (handled exclusively by Paddle). |
| Resend (US) | Email delivery: order receipts, account sign-in, the free-pack download, newsletters you opted into, contact-form forwarding. | Name, email, email content. |
| Supabase (US) | Database hosting (orders, accounts, content). SOC 2 Type II. | All Site data. |
| Netlify (US) | Web hosting, CDN, serverless functions. SOC 2 Type II. | Request logs. |
| Telnyx (US) | Delivery of Cut Local text-message alerts, only to people who opted in. | Mobile number, alert text. |
| Telegram | Delivery of Cut Local alerts, only to people who connected our bot. | Telegram chat ID, alert text. |
| Google Analytics 4 (US, by Google LLC) | Aggregated usage analytics — pages visited, traffic sources. IP addresses are anonymised by Google before storage. | Cookie identifier, page URL, approximate geolocation, device type. |
4. How We Use Your Information
- Process and fulfill your orders and deliver download links.
- Send order confirmations, download access, and account sign-in links.
- Send promotional emails — only if you opted in. You can unsubscribe from any newsletter email at any time.
- Improve the Site, fix bugs, and understand usage patterns (Google Analytics).
- Detect and prevent fraud and abuse.
- Comply with legal obligations (tax, accounting, dispute response).
5. Sharing
We do not sell, rent, or trade your personal information. We share data only with the sub-processors listed in section 3, or when required by law, regulation, or valid legal process.
Text messages: no mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are never shared with any third party. We use your mobile number only to send the Cut Local alerts you asked for. Reply STOP to any message to stop them.
6. International Data Transfers
Because some of our sub-processors are located in the United States or the European Union, your personal data may be transferred to and processed in countries outside your country of residence. Where required, those transfers are protected by Standard Contractual Clauses or equivalent safeguards adopted by the respective processor.
7. Data Retention
- Account and order records: retained for as long as your account exists, and for a further 7 years after closure for accounting and tax reasons.
- Newsletter subscribers: retained until you unsubscribe.
- Contact-form messages: retained for up to 2 years for support history, then deleted.
- Server logs: up to 30 days.
- Google Analytics events: retained for 14 months, the default GA4 retention window.
8. Data Security
We use industry-standard security measures including HTTPS encryption, secure HttpOnly cookies, hashed passwordless authentication, and row-level database security. No method of transmission over the internet is 100% secure, but we work to protect your data with the same care we expect for our own.
9. Your Rights
Depending on your country of residence, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (subject to legal retention obligations).
- Object to or restrict certain processing.
- Receive your data in a portable format.
- Withdraw consent for marketing emails by clicking "unsubscribe" in any email, or by emailing us.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email jolly@digitalchiselco.com. We respond within 30 days.
10. Cookies
We use a small number of first-party cookies and one third-party analytics cookie set by Google Analytics 4. Specifically:
cart(localStorage) — your shopping cart between page loads.dcc_account— your signed-in session on the account dashboard. HttpOnly, Secure, SameSite=Lax._gaand_ga_*— Google Analytics measurement. Set by Google's gtag.js library loaded from googletagmanager.com.
You can disable analytics by enabling your browser's Do Not Track or by using a tracking-blocking extension. Essential cookies cannot be disabled without breaking core Site functionality.
11. Children's Privacy
Our Site is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete the record.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be highlighted at the top of the page for 30 days after they take effect.
13. Contact
Questions about your privacy or this policy? Email jolly@digitalchiselco.com or use the contact page.