Legal

Privacy Policy

Last updated: June 2025 · Bodhi Professional · hello@bodhiprofessional.com

This Privacy Policy explains how Bodhi Professional collects, uses, and protects your personal data. We are committed to handling your data responsibly and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Bodhi Professional is a digital product business operated by an individual based in the United Kingdom. For the purposes of data protection law, Bodhi Professional is the data controller for personal data collected through this website and our digital products.

Contact: hello@bodhiprofessional.com

2. What Data We Collect

Data type	When collected	Purpose
Name and email address	When you make a purchase	Order confirmation and product delivery
Email address	When you subscribe to the newsletter	Sending The Awakened Professional newsletter
Purchase history	When you make a purchase	Order records and customer support
IP address and basic analytics	When you visit our website	Understanding website traffic (aggregated, not individual)

We do not collect payment card details — this is handled entirely by our payment processors (Lemon Squeezy and Gumroad).

3. How We Use Your Data

We use your personal data for the following purposes:

Processing and fulfilling your purchase (legal basis: contract performance)
Sending you order confirmation and download access (legal basis: contract performance)
Sending the newsletter, if you have subscribed (legal basis: consent — you can unsubscribe at any time)
Responding to customer support enquiries (legal basis: legitimate interests)
Improving our products and website (legal basis: legitimate interests, using anonymised data)

4. Third-Party Services

We use the following third-party services that may process your personal data:

Service	Purpose	Their privacy policy
Lemon Squeezy	Payment processing and product delivery	lemonsqueezy.com/privacy
Gumroad	Payment processing and product delivery	gumroad.com/privacy
Beehiiv	Newsletter delivery	beehiiv.com/privacy
Cloudflare	Website hosting and DNS	cloudflare.com/privacypolicy

Each of these providers has their own privacy policy governing how they handle your data. We only share data with third parties where necessary to provide the service you have requested.

5. Data Retention

We retain your data for the following periods:

Purchase records: 7 years (required for UK tax and accounting purposes)
Newsletter subscriber data: until you unsubscribe
Customer support correspondence: 2 years from last contact

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access: you can request a copy of the personal data we hold about you
Right to rectification: you can ask us to correct inaccurate data
Right to erasure: you can ask us to delete your data (subject to legal retention requirements)
Right to restrict processing: you can ask us to limit how we use your data
Right to data portability: you can request your data in a portable format
Right to object: you can object to processing based on legitimate interests
Right to withdraw consent: where processing is based on consent (e.g. newsletter), you can withdraw it at any time

To exercise any of these rights, email hello@bodhiprofessional.com. We will respond within 30 days.

7. Cookies

Our website uses minimal cookies. We use only functional cookies necessary for the website to operate. We do not use tracking cookies or advertising cookies. If you visit our storefront on Lemon Squeezy or Gumroad, their cookie policies apply.

8. Data Security

We take reasonable technical and organisational measures to protect your personal data. Our website is served over HTTPS. Payment processing is handled entirely by PCI-compliant third-party processors — we never see or store your payment card details.

9. International Transfers

Some of our third-party service providers (including Lemon Squeezy, Gumroad, and Beehiiv) may process your data outside the UK or EEA. Where this occurs, we rely on our providers' compliance with applicable data transfer mechanisms (including Standard Contractual Clauses or equivalent safeguards).

10. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available at bodhiprofessional.com/privacy. We will notify newsletter subscribers of material changes.

11. Complaints

If you have concerns about how we handle your data, please contact us first at hello@bodhiprofessional.com. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.