Privacy Policy

blogger4me · Version 1.3 · Effective 31 May 2026

1. Plain-English Summary

We sell downloadable PDF kits to bloggers. To do that, we collect your first name, your email address, your blog URL, and your blog name at checkout. We use Stripe to process your payment, Resend to email you the kit, Supabase to keep your order record, and Kit (ConvertKit) to send you marketing emails if you opt in.

We never sell your data. We don't share your email with other companies. You can ask to see what we hold, correct it, or delete it at any time by emailing hello@blogger4me.com.

If you're in the EU or UK, this policy gives you the GDPR rights you're entitled to — access, rectification, erasure, portability, objection, and withdrawal of consent. If you're in Australia, this policy aligns with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

The rest of this document is the detail behind those statements.

2. What Data We Collect, Why, and Where It Goes

We only collect the four checkout fields above (name, email, blog URL, blog name). We do not ask for your date of birth, phone number, mailing address, niche, audience size, traffic level, income level, or any other identifying information. Your niche is implicit from the kit you buy.

Abandoned cart sequence: Stripe Checkout includes an optional checkbox where you can opt in to our marketing emails. If you tick the box and then leave checkout without completing your purchase, we may send you a short follow-up sequence (maximum three messages) via Resend. If you didn't tick the box, no follow-up is sent. Every message includes a functional unsubscribe link and our sender identification, consistent with the Spam Act 2003 (Cth) and the GDPR consent / withdrawal requirements.

3. Who Else Processes Your Data (Sub-Processors)

We use other businesses to operate blogger4me. Each one is a "sub-processor" under GDPR terminology. Here is the full list:

If we add or change a sub-processor, we update this list before the change takes effect.

4. International Transfers

Most of our sub-processors are based in the United States. Supabase order records are stored in Oceania (Sydney, ap-southeast-2 region). We rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal basis for transferring your personal data outside the EU/UK to US-based sub-processors.

For Australian buyers, the Australian Privacy Principles (APP 8) require us to take reasonable steps to ensure overseas recipients handle your data consistently with the APPs — the SCCs and each sub-processor's published DPA satisfy that obligation.

5. Lawful Basis for Processing (GDPR)

If you're in the EU or UK, GDPR requires us to tell you the legal basis we rely on for each kind of processing:

6. Your Rights

Whether you're in Australia, the EU, or the UK, you have the following rights over the data we hold about you. To exercise any of them, email hello@blogger4me.com with the subject line "Privacy request".

If we can't action your request, we explain why in writing. You always have the right to complain to your local privacy regulator — for Australians, that's the Office of the Australian Information Commissioner (OAIC). For EU residents, the supervisory authority in your country. For UK residents, the Information Commissioner's Office (ICO).

7. Marketing Emails and Unsubscribe

If you opt in to marketing emails, we send you occasional updates about new kits, refinements to existing kits, and post-publish distribution tips. We use Kit (ConvertKit) to send them. Every marketing email includes:

• A clear identification of who's sending it (blogger4me)
• Our legal entity name, ABN, and postal address in the footer
• A one-click unsubscribe link
• Sender information that remains accurate for at least 30 days after sending

This satisfies the Spam Act 2003 (Cth) and the GDPR consent / withdrawal requirements simultaneously.

We do not buy email lists. We do not sell our email list. We do not share our email list with any third party, ever.

8. Cookies

We use cookies on blogger4me.com. The full breakdown is in the Cookie Policy at blogger4me.com/cookie-policy. In short:

• Strictly necessary cookies (session, checkout) — always on, no consent required
• Analytics cookies (Google Analytics 4) — only fire if you accept them via the cookie banner

EU and UK visitors see a banner with real "Accept" and "Reject" buttons before any analytics cookies are set. Australian visitors see the same banner — we apply the strictest standard globally rather than discriminating by location.

9. Data Breach Notification

If we discover a data breach that's likely to cause serious harm:

• For all affected individuals globally, we notify you directly as soon as practicable after we become aware of the breach and complete our assessment.
• For Australian buyers under the Notifiable Data Breaches scheme, we have up to 30 calendar days from becoming aware to assess whether the breach is "eligible" — and we notify the OAIC and affected individuals as soon as practicable once assessed.
• For EU and UK buyers under GDPR Article 33, we notify the relevant supervisory authority within 72 hours of becoming aware of the breach where feasible.

In practice: if your data is exposed, you'll hear from us directly with what happened, what we're doing about it, and what (if anything) you should do.

10. Children

blogger4me's kits are sold to adult bloggers. We do not knowingly collect data from anyone under 16. If you believe we have inadvertently collected data from a child under 16 — whether you're the child, a parent, a guardian, or a third party — email hello@blogger4me.com with the subject "Child data" and we will delete the data within 5 business days.

We monitor regulatory developments in this area, including Australia's Children's Online Privacy Code (expected registered by 10 December 2026), and will update this policy if scope changes.

11. Changes to This Policy

We update this policy when our practices change, when a new sub-processor is added, or when the law changes. The Australian Privacy Act small business exemption applies to blogger4me at launch. Tranche 2 reforms to remove this exemption have been agreed in principle by government but have not been legislated as at May 2026 — expected 2026–2027. blogger4me operates as if the Privacy Act applies in full from launch, so no major policy change will be required when Tranche 2 takes effect.

Material changes are notified to current buyers by email at least 14 days before they take effect. The version number and "last updated" date at the top of this policy always reflect the current version.

12. Contact

If you're not satisfied with our response, you can complain to your local privacy regulator (see Section 6).