Privacy Policy

Last updated: 24 July 2026

Claude Skills Digital Bundle ("we", "us", "our") operates this website and the "Claude Skills Bundle" digital product. This policy explains what data we collect from visitors and buyers, how we use it, who we share it with, and the rights you have over it.

1. Who is responsible for your data

The controller of the personal data collected via this website is Claude Skills Digital Bundle. You can reach us at privacy@claude-skills.digital.

2. What data we collect

2.1 Data you give us directly

At checkout: email address, name, phone number, country / dial-code, IP address, and billing details required to complete the transaction (name on card, card number, expiry, CVC, billing address). Card details are collected and stored by our payment processor (Stripe / SetVault); we never see or store your card number.
In support requests: anything you include in an email to support@claude-skills.digital.

2.2 Data collected automatically

Traffic logs: IP address, user-agent, referrer, timestamp, requested URL — retained for 30 days for security and fraud-prevention.
Cookies: a single first-party session cookie (aiskb_session) that expires when you close the tab, and a localStorage entry (aiskb_cd_end) that stores the countdown timer's expiry time locally in your browser. We do not use third-party tracking cookies.
Analytics: aggregated, non-identifying page-view counters (server-side only). No behavioural profiling.

3. Why we process it — legal bases (GDPR Art. 6)

Performance of a contract — to process your order, deliver the download link, and honour our 14-day refund policy.
Legitimate interest — to prevent fraud, secure the site, and reply to your support requests.
Legal obligation — to keep records required by tax law (7 years for invoicing data in most EU jurisdictions).
Consent — for any future marketing emails; every email we send after order confirmation contains a one-click unsubscribe link.

4. Who we share it with

Payment processor: Stripe, Inc. (US, DPA in place) / SetVault (US) — for processing the payment. See stripe.com/privacy.
Email delivery: a transactional email provider (Postmark or SendGrid) — to deliver your order confirmation and download link.
Hosting: a European infrastructure provider (Hetzner / OVH) — for serving this website and storing your order record.
Legal disclosure: if we receive a valid legal request from a competent authority.

We never sell your data to third parties. We never share your data with ad networks.

5. International transfers

Stripe is located in the United States. Where personal data is transferred outside the EEA/UK we rely on Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework where applicable.

6. How long we keep it

Order records: 7 years (tax law).
Email correspondence: 3 years (support quality).
Traffic logs: 30 days.
Marketing consent record (if opted-in): until you unsubscribe, plus 3 years for evidence of consent.

7. Your rights

Under GDPR / UK GDPR / CCPA you can:

Request a copy of your data (right of access).
Ask us to correct inaccurate data (rectification).
Ask us to delete your data (erasure) — subject to legal retention obligations.
Restrict or object to processing.
Withdraw consent to marketing at any time.
Lodge a complaint with your local Data Protection Authority.

To exercise any of these rights, email privacy@claude-skills.digital. We reply within 30 days.

8. Security

All traffic is served over HTTPS with TLS 1.3. Passwords are not stored — we use magic-link email delivery for repeat downloads. Server access is restricted to two admins with 2FA.

9. Children

Our product is not intended for anyone under 16. We do not knowingly collect data from children.

10. Changes

We publish material changes to this policy on this page and update the "Last updated" date at the top. For substantive changes affecting existing customers we also send a notification email.

11. Contact

Data enquiries: privacy@claude-skills.digital
General support: support@claude-skills.digital