PRIVACY
Only the information needed to sell and deliver the book.
This notice explains, in plain language, the limited information handled when you visit the site, buy the book, or ask for support. The site and the book are operated by Qosmic Co Pty Ltd, an Australian company, which is the controller responsible for the information described here. There are no accounts, no newsletter, and no email sign-up.
What information is handled
The information is limited to what a single purchase and delivery needs:
- Checkout data, held by the payment provider. Stripe processes payment and checkout details such as your name, email, and billing information. Full card details are not received or stored by this site.
- Your delivery email address, used to send your protected download links.
- Support correspondence, if you email us, kept so we can answer and keep a record of the request.
- Website analytics and performance data. Resend sends the transactional delivery emails, and Vercel hosts the site and provides Vercel Analytics and Speed Insights, which measure aggregate performance and traffic.
- Server logs, such as IP address, timestamp, and pages requested, created whenever any website is served.
Google Analytics measures how visitors use the site and may process page views, interactions, device and browser details, referring pages, and cookie identifiers. This information is sent to Google to provide analytics.
Why it is used, and the legal bases
Order information is used to complete payment, deliver protected download links, prevent abuse, provide support, and process refunds. It is not sold. Where the GDPR or UK GDPR applies, we rely on these legal bases:
- Contract, to take payment and deliver the book you bought.
- Legitimate interests, to secure the site, prevent fraud and abuse, and understand aggregate usage.
- Consent, where required, for analytics cookies. You can decline, and it does not affect your purchase.
Where information is processed
Our providers may process information in Australia, the United States, the European Union, and other countries where they operate. Where information is transferred across borders, it is protected by appropriate safeguards, such as standard contractual clauses or the providers’ own transfer frameworks.
How long it is kept
Payment and order records are kept as long as tax and business law requires, which is usually several years. Your delivery email and any support messages are kept while needed to support you and keep records, then deleted. Analytics data is retained in aggregate under the provider’s settings.
Your rights in the EU, UK, and elsewhere
If the GDPR or UK GDPR applies to you, you have the right to access your information, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. You can also complain to a supervisory authority. In Australia, the Australian Privacy Principles apply, and you can complain to the Office of the Australian Information Commissioner (OAIC). To exercise any right, contact us using the details below.
Your rights in California
If the CCPA or CPRA applies to you, you have the right to know what personal information is collected, to have it deleted or corrected, to opt out of the sale or sharing of personal information, to limit the use of sensitive personal information, and not to be treated differently for using these rights. We do not sell or share personal information, and we do not use sensitive personal information for those purposes.
Cookies and analytics
Google Analytics (measurement ID G-1W9KX8F5EM) sets cookies to tell visitors apart and measure usage:
- “_ga” distinguishes visitors; it lasts up to about two years.
- “_ga_G-1W9KX8F5EM” keeps session state; it lasts up to about two years.
- “_gid”, where used, distinguishes visitors; it lasts about 24 hours.
You can opt out through your browser settings, by declining analytics where a choice is offered, or by installing the Google Analytics opt-out browser add-on. Speed and performance measurement from the host is aggregate and does not identify you.
Children
The book and the site are meant for adults and are not directed at anyone under 18. We do not knowingly collect information from children. If you believe a child has provided information, contact us and we will delete it.
Changes to this notice
We may update this notice from time to time. The current version and its effective date are always shown on this page.
Questions
Email book@admin.sirency.com.
This notice is provided for transparency and to explain our practices; it is not legal advice to you.
Effective July 17, 2026.