Store My Library
About Contact

privacy policy

last updated: april 2026

this policy explains how danbolton.co collects, uses, and protects your personal information.

who i am

this site is owned and operated by dan bolton, based in New Zealand. for questions about your privacy or this policy, email [email protected]

what i collect

i collect information you provide directly:

  • name and email address (when you opt in, purchase, or contact me)
  • payment information (processed securely through stripe — i do not store your card details)
  • any other information you voluntarily share via email, forms, or direct messages

i also collect some information automatically:

  • device and browser type
  • IP address
  • pages visited and time spent on the site
  • referring URLs

this data is collected through cookies and similar technologies used by my site platform (kajabi) and analytics tools.

legal basis for processing

if you're in the EU, UK, or another jurisdiction that requires a legal basis for processing personal data, here's how i handle it:

  • contract performance — processing your data to deliver products you've purchased, manage your account, and send transactional emails (receipts, access details, product updates)
  • legitimate interest — analyzing site traffic, improving the user experience, and maintaining site security. i balance these interests against your rights and only process what's necessary.
  • consent — sending marketing emails and newsletters. you opt in explicitly, and you can withdraw consent at any time by unsubscribing.

i comply with the New Zealand Privacy Act 2020, the EU General Data Protection Regulation (GDPR), and the UK GDPR to the extent they apply to my business.

how i use your information

i use your information to:

  • deliver products and services you've purchased
  • send emails you've opted in to receive (newsletters, sequences, product updates)
  • process payments and manage your account
  • improve the site and understand how people use it
  • respond to your questions or support requests

i do not sell, rent, or trade your personal information to anyone. ever.

third-party services

i use the following services that may process your data on my behalf:

  • kajabi — site hosting, course delivery, email marketing
  • stripe — payment processing
  • google analytics — site traffic and usage data
  • manychat — instagram DM automation and routing
  • vercel — hosting for web-based tools (e.g. diagnostic tools)

each of these services has its own privacy policy and acts as a data processor on my behalf. i encourage you to review their policies if you'd like to understand how they handle your data.

i may also use additional tools or services from time to time. if a new service processes your personal data in a materially different way, i'll update this policy.

cookies

this site uses cookies for the following purposes:

  • essential cookies — keeping you logged in to purchased products and maintaining site functionality. these are necessary and cannot be disabled without losing core functionality.
  • analytics cookies — tracking site usage through google analytics to help me understand how people use the site and where to improve it.
  • preference cookies — remembering your settings and preferences.

you can control non-essential cookies through your browser settings. disabling analytics cookies will not affect your ability to use the site or access products.

email communication

when you opt in through a form on this site, you're giving explicit consent to receive marketing emails from me. every email includes an unsubscribe link. if you unsubscribe, i'll remove you from that list promptly.

i may still send transactional emails related to purchases you've made (e.g. access details, receipts, important product updates). these are necessary to deliver what you've bought and are sent on the basis of contract performance, not consent.

data retention

i keep your personal information for as long as you have an active account or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements.

if you'd like your data deleted, email [email protected] and i'll take care of it within 30 days, unless i'm required by law to retain it. deletion of your data may result in loss of access to purchased products.

your rights

depending on where you live, you may have the right to:

  • access the personal data i hold about you
  • correct inaccurate information
  • request deletion of your data
  • restrict or object to certain processing of your data
  • request a copy of your data in a portable format
  • withdraw consent for marketing communications at any time

if you're in the EU or UK, you also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been processed unlawfully.

if you're in New Zealand, you can contact the Office of the Privacy Commissioner (privacy.org.nz) with any concerns.

to exercise any of your rights, email [email protected]

international data transfers

this site serves a global audience and is operated from various locations. your data may be transferred to and processed in countries outside your own, including New Zealand, the United States, and other countries where my service providers operate.

these countries may have data protection laws that differ from yours. where required, i rely on standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms to ensure your data is protected in accordance with applicable law.

by using this site, you acknowledge that your data may be transferred internationally as described above.

data security

i take reasonable measures to protect your personal information from unauthorized access, loss, or misuse, including using encrypted connections (SSL/TLS) and working with reputable service providers. however, no method of transmission over the internet is 100% secure, and i cannot guarantee absolute security.

in the unlikely event of a data breach that poses a risk to your rights, i will notify affected users and relevant authorities as required by applicable law, without undue delay.

children's privacy

this site is not intended for anyone under 18. i do not knowingly collect personal information from minors. if i become aware that a minor has provided personal data, i will delete it promptly.

changes to this policy

i may update this policy from time to time. changes take effect when posted. if a change materially affects how your personal data is used, i'll make a reasonable effort to notify you via email before the change takes effect.

contact

dan bolton [email protected]