Privacy Policy
Who we are
This website and the workshops sold on it are operated by Bomani Digital ("Bomani Digital", "we", "us"). Bomani Digital is the data controller for the personal data described in this notice, which means we decide what data is collected and why.
What we collect and why
- Account data (email address, login credentials, name if provided) — to create and secure your account and give you access to your attendee dashboard. Legal basis: performance of our contract with you.
- Registration and enrollment data (workshop chosen, session date, attendance, order reference) — to confirm your seat, send session details and provide the workshop. Legal basis: performance of our contract with you.
- Book download data (email address, time of download) — to deliver the book and record the request. Legal basis: performance of our contract / legitimate interest in delivering what you asked for.
- Marketing data (email address, opt-in record and timestamp) — to send workshop updates where you have explicitly opted in. Legal basis: consent, withdrawable at any time.
- Support messages — to answer your questions. Legal basis: legitimate interest in supporting our customers.
- Usage and technical data (pages viewed, device type, approximate location, IP address) — for analytics, security and fraud prevention. Legal basis: legitimate interest in keeping the service safe and improving it.
- Legal and accounting records — where we must keep them. Legal basis: compliance with a legal obligation.
Payments
Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders and acts as an independent controller for the payment data it collects. When you buy a workshop seat, your payment details (card details, billing address, tax identifiers) are collected and processed by Paddle — not by us. We never see or store your full payment details. We receive only the information we need to fulfil your order, such as your email address, order reference and the item purchased. Paddle also handles billing, tax compliance, invoicing, refunds and related customer service enquiries. See Paddle's privacy notice for details.
Who we share data with
- Merchant of Record — Paddle, for the sale of our workshops, payments, invoicing, tax compliance and refunds.
- Service providers / subprocessors — hosting and database providers, email delivery, video conferencing for live sessions, and privacy-respecting analytics.
- Professional advisers — accountants and legal advisers where needed.
- Authorities — where we are required to do so by law.
We do not sell personal information.
International transfers
Some of our providers operate outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.
How long we keep it
- Account and enrollment records: for as long as your account is active, then up to 24 months after your last workshop.
- Order and tax records: up to 7 years, where required by law.
- Marketing opt-in records: until you unsubscribe, then up to 24 months as proof of consent.
- Book download records: up to 24 months.
- Support messages: up to 24 months after the conversation ends.
- Analytics and technical logs: up to 14 months.
When data is no longer needed, we delete or anonymise it.
Your rights
Depending on where you live, you may have the right to access your data, correct it, have it deleted, restrict or object to processing, receive a portable copy, and withdraw consent at any time (which does not affect processing already carried out). You can also unsubscribe from updates using the link in any email. Email us to exercise any of these rights and we will respond within one month. If you are in the UK or EEA, you also have the right to complain to your local data protection supervisory authority.
Security
We use appropriate technical and organisational measures, including encryption in transit, access controls and server-side authorisation checks. Access to your enrollments, resources and meeting links is restricted to your authenticated account, and administrative access is validated on the server.
Cookies
We use essential cookies to keep you signed in and to keep the site secure, and privacy-respecting analytics cookies to understand which pages and modules are useful. Payment pages served by Paddle may set their own cookies. You can clear or block cookies in your browser settings; blocking essential cookies may stop parts of the site working.
Changes
We may update this notice from time to time. Material changes will be reflected on this page with a new effective date.
Contact
Questions about this page? Email hello@bomanidigital.com.