1. Who's responsible for your data
Anxious to Secure (“we”, “us”) runs securewithnora.com and is responsible (the “controller”) for the personal data described here. For anything privacy-related, email hello@securewithnora.com.
2. What we collect and why
When you visit the site
We measure how the site is used with our own simple analytics, not Google Analytics or ad trackers. We record:
- a random visitor ID and session ID, created in your browser (they don't contain your name or email);
- the pages and sections you view, the buttons you click, how far you scroll and how long you stay;
- the link that brought you, such as which Instagram Reel (from tags in the link);
- your device type and browser, whether you're in Instagram's or Facebook's built-in browser, and your country.
Your country comes from your connection when the page loads. We don't keep IP addresses in our records. Our host, Cloudflare, processes your IP address to deliver the site and block attacks, and our servers hold it in memory for a few minutes to stop abuse of our forms.
We use this to understand which content helps people and to improve the site (our legitimate interest). If your browser sends a Global Privacy Control or Do Not Track signal, or you turn analytics off, we don't record any of this.
When you ask for a free resource
We store your email address, when you signed up and the link that brought you, so we can send what you asked for (to fulfil your request).
When you buy the workbook
Dodo Payments, our reseller, collects your payment details. We never see or store your full card number. Dodo shares with us your name, email, country, the amount and currency, order and payment IDs, and the tags that show which link brought you. We use these to deliver the workbook, help you, handle refunds and disputes, keep accounting records and prevent fraud (to perform our contract with you and meet legal obligations).
When you email us or ask for a refund
We keep your message, the details you give us and your email address so we can reply, follow up and process your request.
What you have to give us
Nothing, to browse the site. To get a free resource we need your email address, and to buy the workbook Dodo Payments needs your payment details and email. Without them, we can't send what you asked for. We don't make automated decisions about you that have legal or similarly significant effects.
3. What we never do
- We don't sell your personal data, and we don't share it for targeted advertising.
- We don't use advertising cookies or third-party trackers on this site.
- We don't collect health information. We don't ask about your mental health, diagnoses or treatment, we don't draw conclusions about your health from the pages you read or what you buy, and we never see what you write in the workbook: you fill it in on your own device or on paper.
6. Where your data is stored
Our providers store and process data in the United States and other countries. Where data leaves the EU, UK or Switzerland, we rely on safeguards such as the European Commission's standard contractual clauses or the provider's certification under the EU–US Data Privacy Framework.
7. How long we keep it
- Analytics events: up to 24 months, then deleted.
- Emails for free resources: until you unsubscribe or ask us to delete them.
- Orders: 6 years, for accounting, tax, refunds and disputes. Dodo Payments keeps its own records as the seller.
- Refund requests: kept with the order they belong to.
- Emails you send us: as long as we need them to help you, and no longer than 2 years.
8. How we protect it
Everything travels over encrypted connections (HTTPS). The database is private and access-controlled, download links are signed and expire, and the owner's dashboard needs a code from an authenticator app, with sign-in paused after repeated wrong codes. We collect as little as we can. No system is perfectly secure, but if a breach ever affected your data, we'd tell you and the authorities as the law requires.
9. Your rights
Wherever you live, you can ask us to show you the personal data we hold about you, correct it or delete it, and you can unsubscribe from our emails at any time.
In the EU, the UK and Switzerland, you also have the right to restrict or object to our use of your data (including our analytics), to receive it in a portable format, and to withdraw consent you've given. You can complain to your local data protection authority (in the UK, the Information Commission, still known as the ICO), though we'd like the chance to help first.
In US states with privacy laws (such as California), you also have the right to know what we collect and to opt out of the sale or sharing of your data. We don't sell or share it, or use it for targeted advertising. We won't treat you differently for using your rights.
Do Not Track and Global Privacy Control. When your browser sends either signal, our analytics switches off and stores nothing on your device. No other company tracks you across websites through our site.
To use any of these rights, email hello@securewithnora.com from the address you used with us. We'll reply within 30 days (often much sooner).
10. Children
The site and the workbook are for adults (18 and over). We don't knowingly collect data from children. If you think a child has given us their details, email us and we'll delete them.
11. Changes to this policy
If we change how we use your data, we'll update this page and the date at the top before the change takes effect. If we ever start using ad trackers or sending regular marketing emails, this page will say so first. See also our Terms of Use.
Questions about this page?
Email hello@securewithnora.com. We read every message and usually reply within two business days.