← The Cocoa Studio

Privacy Policy

Last updated: August 2026

This policy explains what personal data we collect when you visit this site or buy the course The Dragon Egg Method, why we collect it, who we share it with, and what rights you have.

1. Who is responsible for your data

Contact for any privacy question or request: SUPPORT_EMAIL_TBD

We are the data controller: we decide why and how your personal data is processed. We are a very small operation and we do not have a designated data protection officer.

2. What we collect

Information you give us

• Your email address, which you enter at checkout so we can send you your course access and bonuses, and so Stripe can send your receipt.
• Anything you write to us by email, including refund requests and support questions.

Your email address is sent to us only when you complete a payment. If you type it in and leave without paying, it is not stored anywhere.

Information collected automatically

• Technical and usage data. IP address, browser and device type, pages requested and time of visit. Our hosting provider records this in standard server logs.
• No advertising or analytics trackers. We do not run an advertising pixel or a third-party analytics tool on this site. If that changes, this policy will be updated first.

Information we receive from our payment provider

When you pay, Stripe processes your payment and sends us a confirmation containing your email address and transaction details. We never see or store your card number. Your card details are entered into Stripe's own secure payment form and are handled entirely by Stripe.

3. Why we use it, and our legal basis

We do not sell your personal data, and we do not use it to make any automated decision that produces a legal or similarly significant effect on you.

4. Who we share it with

We share data only with the service providers we need to run this business:

• Netlify. Website hosting and the code that creates your checkout session. Receives your email address and technical data.
• Stripe. Payment processing. Receives your payment and contact details directly from you and acts as its own controller for that data.

We may also disclose data where the law requires it, or to establish or defend a legal claim.

5. Where your data goes

Our service providers are based principally in the United States, so your data is transferred and stored there. Where such a transfer requires safeguards, we rely on the protections offered by those providers, including standard contractual clauses where applicable.

6. How long we keep it

• Purchase and payment records. Kept for as long as required by the accounting and tax law that applies to us.
• Customer email addresses. Kept while you have access to the course, so we can deliver updates.
• Email correspondence. Kept up to 3 years after our last exchange.
• Server logs and technical data. Kept up to 12 months.

7. Your rights

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct anything that is wrong or incomplete;
• delete your data;
• restrict or object to how we use it;
• transfer your data to another provider;
• withdraw consent at any time, where we relied on consent.

Email SUPPORT_EMAIL_TBD and we will respond within one month. We may ask you to confirm your identity first, so that we do not hand your data to someone else.

8. Complaints

If you believe we have handled your data improperly, please tell us first, because we would rather fix it. You also have the right to complain to the data protection supervisory authority where you live. If you are in the EEA or the UK, that is your national data protection authority.

9. Cookies and similar technologies

This site uses a small amount of browser storage to remember how long your bonus offer has left, so the countdown does not restart every time you reload the page. That storage is functional and stays on your device.

The checkout page loads Stripe's payment form, which sets its own cookies for payment and fraud prevention. You can block or delete cookies in your browser settings; the sales page will still work, though the countdown may reset and checkout will not function without Stripe's.

10. Children

This course is sold to adults. We do not knowingly collect personal data from anyone under 16, and we do not direct this site at children.

11. Security

We use encrypted connections (HTTPS) across the site, and payments are handled entirely by Stripe. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

12. Changes to this policy

If we change this policy we will post the new version here and update the date at the top.

13. Contact

The Cocoa Studio
SUPPORT_EMAIL_TBD