Privacy Policy

Introduction

Forty Years Twice is operated by Mark as a sole proprietorship based in Ontario, Canada. This Privacy Policy describes how we collect, use, store, and protect personal information when you visit this website or purchase products from it. By using this site, you agree to the practices described in this policy.

Information We Collect

When you purchase a product, we collect your name, email address, and billing information. Payment card data is handled directly by our payment processor (Stripe) and is not stored on our servers. We do not retain full payment card numbers.

When you visit this site, we may collect standard analytics data including your approximate geographic location, device type, browser, referring URL, and pages visited. This data is collected in aggregate and is not linked to your identity.

How We Use Your Information

We use the information we collect to fulfill your purchase and deliver the digital product to you, to respond to customer service inquiries, and to send transactional emails related to your purchase (such as your receipt and download link).

We do not sell, rent, or trade your personal information to third parties. We do not send marketing emails without your explicit consent.

Cookies and Analytics

This site may use cookies for basic functionality and analytics. Analytics data helps us understand how visitors use the site and is collected in aggregate form. You can disable cookies in your browser settings; doing so may affect some site functionality.

Third-Party Processors

We use Stripe as our payment processor. Stripe collects and processes payment information on our behalf and is governed by Stripe's own privacy policy. We use Vercel to host this website. We use a transactional email provider to deliver your purchase receipt and product files. Each of these providers processes only the data necessary to provide their service.

Data Retention

We retain your email address and order information for as long as necessary to fulfill your purchase, provide customer support, and comply with applicable tax, accounting, and legal requirements. You may request deletion of your personal data at any time by contacting us at mark@fortyyearstwice.com, subject to any legal retention obligations that may apply.

Your Rights (Canada, PIPEDA)

If you are a resident of Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA), including the right to access the personal information we hold about you and the right to request corrections to that information. To exercise these rights, contact us at mark@fortyyearstwice.com.

Your Rights (European Union, GDPR)

If you are a resident of the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to certain processing and to lodge a complaint with a supervisory authority. To exercise these rights, contact us at mark@fortyyearstwice.com.