Privacy Policy

1. Who We Are

Endpoint 51 is operated by Simon O'Connor, a sole trader based in Ireland. We are the data controller for the personal data described in this policy.

Contact: simon@endpoint51.com

2. What Data We Collect

We collect the following personal data:

• Email address: provided when you purchase the book, request a free chapter preview, or sign up to receive updates. Purchase addresses are used for book access and essential transactional messages. We use an address for the optional educational email series only after its owner confirms the subscription.
• Payment information: processed by Stripe on our behalf. We do not store your card details. Stripe may retain payment records in accordance with their own privacy policy.
• Authentication and checkout tokens: temporary random tokens stored in strictly necessary cookies to bind a Stripe checkout to the browser that started it and to keep you logged in after purchase or recovery sign-in. These expire automatically.

We use Cloudflare Web Analytics, a privacy-preserving analytics tool, to understand aggregate site traffic (page views, visit counts, and referrer sites). It does not use cookies, does not fingerprint devices, and does not track individual visitors, and we receive only aggregate statistics. Beyond this, we do not track your behaviour on the site.

3. Why We Process Your Data

4. Marketing Emails

Purchasing the book does not subscribe you to marketing email. If you submit the optional email-series form, we first send a confirmation request and do not begin the series unless you confirm it. Every message in the series includes an unsubscribe link, and we stop the series after an unsubscribe, complaint, suppression, or delivery failure. We retain a minimal suppression record so that we can honour that choice.

5. Third Parties

We share data with the following third-party services where necessary to operate the business:

• Stripe: payment processing. Your payment details are handled directly by Stripe and are subject to Stripe's Privacy Policy.
• Resend: delivery of transactional messages, subscription confirmations, and the optional educational email series. Your email address is shared with Resend only for the messages appropriate to your purchase, account, or confirmed subscription.
• Netlify: website hosting. Netlify processes server logs and form submissions as part of hosting the site. Subject to Netlify's Privacy Policy.
• Cloudflare: privacy-preserving web analytics. Cloudflare Web Analytics measures aggregate page views and visits without cookies or cross-site tracking; we do not receive data about identifiable individuals. Subject to Cloudflare's Privacy Policy.

We do not sell your data to any third party.

6. Cookies

We use strictly necessary cookies for book access. A temporary checkout-claim cookie binds a Stripe checkout to the browser that started it and is deleted after successful activation. An authentication cookie keeps you logged in after purchase or recovery sign-in and expires automatically. We do not use advertising, tracking, or analytics cookies. Our analytics tool (Cloudflare Web Analytics) is cookieless by design.

7. Data Retention

We retain your data for as long as necessary to provide the service:

• Email address: retained while you have an active account or confirmed email-series subscription, until you request deletion, or as a minimal suppression record where needed to honour an unsubscribe or delivery stop.
• Payment records: retained for 7 years in accordance with Irish tax and accounting requirements.
• Authentication tokens: expire automatically after a short period.

8. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access: you can request a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct inaccurate data.
• Right to erasure: you can ask us to delete your data, subject to legal retention requirements.
• Right to data portability: you can request your data in a structured, machine-readable format.
• Right to object: you can object to processing based on legitimate interests, including direct marketing.
• Right to restrict processing: you can ask us to limit how we use your data in certain circumstances.

To exercise any of these rights, email us at simon@endpoint51.com. We will respond within 30 days.

9. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC):

• Website: dataprotection.ie
• Phone: +353 57 868 4800
• Post: 21 Fitzwilliam Square South, Dublin 2, D02 RD28

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email to registered users. The "last updated" date at the top of this page reflects the most recent revision.

11. Contact

Questions about this policy? Email us at simon@endpoint51.com.