Privacy Notice

The data controller for this website is The Becoming Her — the seller of “The Becoming Her” digital guide. As controller, we decide why and how your personal data is processed and we are responsible for protecting it.

• Account data — email address and password (stored only as a secure hash) when you create a member account. Purpose: to create and secure your account and give you access to your purchase. Legal basis: performance of a contract.
• Order data — your email address, the product purchased, amount, currency and transaction reference, received from Paddle after a completed purchase. Purpose: to deliver your guide, link your purchase to your account and keep the sales records required by law. Legal basis: contract performance and legal obligation (accounting/tax).
• Support messages — if you contact us, the content of your message and your email address. Purpose: to answer you. Legal basis: legitimate interest.
• Technical data — IP address, device and browser information, and basic usage data. Purpose: security, fraud prevention and keeping the site running. Legal basis: legitimate interest.

Payment card details are collected and processed directly by Paddle (our Merchant of Record); we never see or store your card number.

• Paddle.com Market Ltd — Merchant of Record, for processing the sale, payments, tax compliance, invoicing and refunds;
• Hosting and infrastructure providers — who store and serve the website and database under appropriate safeguards;
• Professional advisers — accountants or legal advisers, where needed;
• Authorities — only where the law requires it.

We do not sell your personal data to anyone.

Some of our service providers (including Paddle) process data outside the EU/EEA. Where that happens, transfers are protected by adequacy decisions or Standard Contractual Clauses, so your data keeps EU-level protection wherever it goes.

Account data is kept while your account is active. Order and invoice data is kept for the period required by applicable accounting and tax law (up to 10 years). Support messages are kept as long as needed to handle your request. When data is no longer needed, it is deleted or anonymised.

As an EU/EEA resident you have the right to: access your data, rectify it, request erasure, restrict or object to processing, data portability, and to withdraw consent at any time (where processing is based on consent). You also have the right to lodge a complaint with your local data protection authority. We answer requests within one month. To exercise any right, contact us at the email shown on this site.

We use appropriate technical and organisational measures — encrypted connections (HTTPS), hashed passwords, access controls and row-level data isolation — to keep your data safe.

This site uses only essential cookies and storage items — for example, to keep you signed in to the member area and to remember your session. We do not use advertising or third-party tracking cookies. You can clear or block cookies in your browser settings; essential features may stop working if you do.

If this notice changes, the updated version will be posted on this page with a new “last updated” date. Material changes will be flagged clearly.