The short version
- We collect only what we need to run your membership, keep it secure and help you.
- We never sell your data and never see your card details.
- Where the law requires it, analytics and marketing only run if you agree. Change your choice any time with Cookie Settings at the bottom of every page.
- Unsubscribe from marketing emails with one click, any time.
- Ask for a copy of your data or have it deleted with one support ticket.
1Who Is Responsible for Your Data
Kevin Brendan Fahey Unipessoal LDA, Portugal, is the data controller for the personal data described here. For anything about your data, open a support ticket or email [email protected].
2What We Collect and Why
| Data | Why we use it | Legal basis |
|---|---|---|
| Name, email address, username and password (stored only in scrambled, hashed form) | Create and run your member account and let you log in | Contract |
| Membership levels, purchase and payment records (amount, date, transaction ID, the platform you paid through) | Give you access to the volumes you are entitled to, handle renewals, cancellations and refunds | Contract; legal obligation for accounting records |
| Account activity: logins, failed login attempts, password resets, downloads, IP address and browser type | Keep accounts secure, stop account sharing and abuse, and help you when something goes wrong | Legitimate interest |
| Support tickets and emails you send us | Answer your questions and fix problems | Contract; legitimate interest |
| Messages you send in our website chat, and the name and email you give it if you choose to | Answer your questions, send you what you asked for (such as the free checklists) and improve the answers | Legitimate interest; consent for anything we email you |
| Your cookie choice, with a one-way scrambled version of your IP address | Remember and prove what you allowed in the cookie banner | Legal obligation |
| Website visit data: pages viewed, the link or campaign that brought you, device and browser type | Understand which pages and campaigns work, and improve the site | Legitimate interest |
| Ad measurement: pages viewed, IP address, browser details, Google’s cookie identifiers and the click ID of a Google ad | Measure our Google ads and show our ads again to people who visited (remarketing), see “Advertising with Google” below | Consent where the law requires it; otherwise legitimate interest |
| Email engagement (whether our emails are opened or clicked) | Send useful membership emails and stop sending ones that are not wanted | Legitimate interest; consent where required |
We never collect or store your card details: payments are handled by the payment platform. We do not want sensitive information such as health data, so please do not send it in support tickets.
3Emails We Send
We send account emails you need, such as your login details, password resets, receipts and important changes to the membership. As a customer, we may also email you about new volumes, updates and related products from Kevin Fahey. Every marketing email has a one-click unsubscribe link, and unsubscribing never affects your account emails or your access.
4Cookies and Browser Storage
We keep this deliberately small. Strictly necessary cookies always run. Where the law requires it, for example in the EU, the UK and Switzerland, a cookie banner asks first and analytics and marketing only run if you agree. Wherever you are, you can change your choice at any time with Cookie Settings at the bottom of every page.
| What | Type | Purpose | How long |
|---|---|---|---|
| Your cookie choice | Strictly necessary | Remembers what you allowed in the cookie banner, so it does not ask again on every page. Your choice is also recorded, with a one-way scrambled version of your IP address, as proof of consent. | 180 days |
| Members area session cookie | Strictly necessary | Keeps you logged in while you use the members area. The members area cannot work without it. | Until you log out or close the session |
| Interactive checklist progress (browser storage) | Functional | Remembers the boxes you tick and the notes you write on interactive checklists. It is saved only in your own browser on your own device and is never sent to us. | Until you clear your browser data |
| Support chat (browser storage) | Functional | If you use the chat, remembers your conversation in this browser so it carries on from page to page. Messages you send are kept with our support records. | Until you clear your browser data |
| Visitor analytics (our own script) | Analytics | Records pages viewed and the link or campaign that brought you, and stores an identifier in your browser so repeat visits can be recognised. It runs on our own systems and the data is not sold or shared with advertisers. | Up to 12 months |
| Campaign tracking (our own script) | Marketing | Records which of our links, emails and promotions brought you, so we know which ones are worth running. It runs on our own systems. | Up to 12 months |
| Google Tag Manager (Results With Kevin AI offer pages only) | Marketing | Measures whether our advertising works. Where you are asked first, it runs in Google Consent Mode and sets no advertising or analytics cookies until you agree. | Set by Google |
| Google Ads tag: _gcl_au, _gcl_aw, _gcl_gb, plus Google’s own cookies on google.com and doubleclick.net | Marketing | Counts sign-ups and sales that came from our Google ads, and lets us show our ads again to people who visited. It does not load in browsers that send a Global Privacy Control signal. | 90 days; Google’s own up to 13 months |
| rx_ads_optout | Strictly necessary | Remembers that you turned off our Google tag with the button below. | 2 years |
| Blog login cookies (WordPress) | Strictly necessary | Keep you logged in if you log in to the blog. | Up to 2 days, or 2 weeks with “Remember me” |
| Profile pictures (Gravatar) | Functional | In the members area your profile picture is loaded from Gravatar, a service run by Automattic, using a scrambled (hashed) version of your email address. | Set by Gravatar |
You can also block or delete cookies in your browser settings at any time. Saying no to analytics or marketing does not affect your use of the site. Blocking the session cookie means you cannot log in to the members area.
Advertising with Google
We advertise with Google Ads. On our public pages (never in the members area), Google’s tag tells Google which pages you visit and whether you came from one of our ads, together with your IP address, browser details and Google’s own cookies and identifiers. Google uses this to count results from our ads and to let us show our ads again to people who visited (remarketing).
- Where you are asked first (for example in the EU, the UK and Switzerland), the tag runs in Google’s consent mode: it sets no advertising cookies and does not add you to advertising lists unless you allow marketing in our cookie banner.
- Global Privacy Control: if your browser sends this signal, the tag does not load at all.
- Turn it off yourself: press the button below. A small cookie (rx_ads_optout) remembers your choice in this browser.
- Google’s own settings: manage the ads Google shows you in My Ad Center. How Google uses information from sites that use its services: policies.google.com/technologies/partner-sites.
6International Transfers
Some of these providers are based in the United States. Where your data leaves the EU, we rely on the EU-US Data Privacy Framework for certified providers, or on the European Commission's Standard Contractual Clauses.
7How Long We Keep Data
| Data | How long |
|---|---|
| Member account and activity | While your account exists. Ask us to delete it at any time. |
| Purchase and accounting records | 10 years, as Portuguese tax law requires |
| Support tickets | Up to 3 years after the ticket is closed |
| Email marketing data | Until you unsubscribe. We keep your address on a do-not-email list so you are not emailed again. |
8How We Protect It
The site runs over encrypted HTTPS. Passwords are stored only as secure hashes, so nobody, including us, can read them. Downloads use signed links that expire, and admin access is restricted and logged. No system is perfectly secure, but if a breach ever puts your data at risk, we will tell you and the authorities as the law requires.
9Your Rights
Wherever you live, you can ask us to:
- See the personal data we hold about you and get a copy.
- Correct anything that is wrong. You can update your name and email from My Profile in the members area.
- Delete your data, except records we must keep by law.
- Restrict or object to how we use it, including stopping marketing emails at any time.
- Move the data you gave us to another service, in a common format.
If you are in the United States: depending on your state, you also have the right to opt out of the sale of your personal information, its sharing for targeted advertising, and profiling. We do not sell personal information for money. Google’s advertising tag on our public pages may count as “sharing” for cross-context behavioural advertising or as “targeted advertising”: you can opt out with the button under “Advertising with Google”, with Cookie Settings at the bottom of every page, by sending a Global Privacy Control signal (which we honour), or by emailing us. You can appeal our answer by replying to it, and we will not treat you differently for using your rights.
To use any of these rights, open a support ticket or email [email protected]. We reply within one month. If you are not happy with our answer, you can complain to the Portuguese data protection authority (CNPD, cnpd.pt) or the authority in your own country.
10Children
The membership is for adults running a business. We do not knowingly collect data from anyone under 18.
11Changes to This Policy
If we change how we use your data, we will update this page and the date at the top first. Important changes will also be emailed to members.
12Contact Us
Questions about this page, your account or your data? We answer every message.
Kevin Brendan Fahey Unipessoal LDA, Portugal (EU).