Privacy policy

Only what the job needs. When you submit an order form:

• Your full name — to match your LinkedIn profile.
• Your primary LinkedIn email address — the voucher invite is bound to it, so it cannot be issued without it.
• Your WhatsApp number — so we can confirm details and arrange payment.
• Your LinkedIn profile URL — to confirm we are issuing against the right account.
• Your chosen plan.

When you use the contact page, we collect your name, email, the topic you selected and your message.

In both cases we also record the IP address the submission came from and a timestamp. That is used to rate-limit the form and identify abuse, and nothing else.

There is no checkout on this site and no payment gateway. No payment instrument ever reaches our systems, so there is none to lose. If anyone claiming to be us asks for any of the above, it is not us.

To fulfil your order

Contacting you, confirming your details, issuing the voucher invite link, and supporting you for the term. This is necessary to perform our contract with you.

To keep the forms usable

Rate-limiting and spam filtering using the IP address and timestamp. This is our legitimate interest in not being flooded by bots.

To meet legal obligations

Keeping records of transactions where tax or accounting law requires it.

We do not use your details for marketing, we do not build profiles, and we do not make automated decisions about you.

Two processors, both handling data on our instructions:

• Resend — delivers the order notification and your confirmation email. It processes the contents of those emails.
• Vercel — hosts the site and runs the form endpoints, and keeps short-lived server logs.

We do not sell your data. We do not share it with advertisers, data brokers or list builders. We do not send it to LinkedIn — you activate your own voucher, so LinkedIn only ever sees your own action on your own account.

We may disclose data where the law requires it, or to establish or defend legal claims.

If we ever add analytics, this section changes first and we will ask for consent where consent is required.

Our hosting and email providers operate internationally, so your data may be processed outside your own country, including in the United States. Where data leaves the UK or EEA, our providers rely on standard contractual clauses or an equivalent approved transfer mechanism.

• Order records — for the term you bought plus 12 months, so we can honour the replacement guarantee and answer questions afterwards.
• Contact messages — up to 12 months after the matter is closed.
• Financial records — as long as tax and accounting law requires.
• IP addresses and timestamps — a short abuse-prevention window, then discarded.

After that, records are deleted.

Depending on where you live, you can ask us to do any of the following:

• Access — get a copy of what we hold about you.
• Correct — fix anything inaccurate.
• Delete — erase it, where we have no overriding obligation to keep it.
• Restrict or object — limit how we use it, including anything we do on the basis of legitimate interests.
• Port — receive it in a portable format.
• Withdraw consent, where we relied on consent.

Make any of these requests through the contact page using the Compliance or data request topic. We respond within one month. There is no charge.

If you are unhappy with how we handled it, you can complain to your local data protection authority. In the UK that is the Information Commissioner's Office.

The site is served over HTTPS. Form submissions go to a server endpoint that validates and rate-limits them. Credentials for our email provider are held as server-side environment variables and are never exposed to the browser.

The strongest protection here is what we do not hold: no passwords, no account access, no payment instruments. There is no honeypot of credentials for anyone to steal.

This service is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has submitted details to us, tell us and we will delete them.

If this policy changes, the date at the top of the page changes with it. Material changes affecting how we use data you already gave us will be notified to you by email where we can reach you.