Who is responsible
This website, ben-toms.com, is run by Ben Toms, an individual based in Alicante, Spain. I am the data controller for the personal data described here. Contact me about anything on this page at me@ben-toms.com.
What I collect and why
Browsing the site
Analytics. I use Google Analytics 4 to understand which pages and products people find useful, for example page views, the pages you came from, approximate location (country or city), device and browser type, and clicks on buttons such as downloads and checkout links. Google Analytics uses cookies and a pseudonymous identifier; I do not use it to identify you personally and I do not combine it with other data about you. Legal basis: your consent. Google Analytics only loads if you choose Accept in the cookie banner.
Hosting. The site is hosted by Netlify, which processes technical data such as your IP address, browser and the pages requested in order to deliver the site and keep it secure. Legal basis: my legitimate interest in running a secure, working website.
Buying a skill pack or tutorial pass
Purchases are handled by Lemon Squeezy, who act as the merchant of record. They collect your name, email address, billing address and payment details, process the payment, handle tax, and email you your receipt and licence key. Lemon Squeezy is responsible for that data under its own privacy policy. I receive order details (such as your name, email, country, the product bought and the amount) so I can provide the product and support. Legal basis: performance of a contract with you.
Licence keys. When you enter a licence key on this site, it is sent to Lemon Squeezy to check it is valid and which product it belongs to. I do not store the key. If it is valid, your browser receives a signed cookie that records which content you have unlocked, so you do not have to re-enter the key on every visit. Legal basis: performance of a contract with you.
Affiliate referrals
If you arrive through an affiliate's link, a Lemon Squeezy affiliate script on this site stores a referral identifier in your browser so the affiliate can be credited if you buy within the tracking period (currently 30 days). Legal basis: your consent. The script only loads if you choose Accept in the cookie banner.
Emailing me
If you email me, I use your email address and message to reply and, if relevant, to provide support for something you bought. Legal basis: my legitimate interest in replying to you, or performance of a contract for purchase support.
I do not sell personal data, I do not use it for automated decision-making, and there is no account system or newsletter on this site.
Cookies and similar technologies
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| bt_packs | This site | Remembers which skill packs your licence key unlocked (strictly necessary) | 90 days |
| bt_tutorials | This site | Remembers that your licence key unlocked the tutorials (strictly necessary) | 90 days |
| _ga, _ga_* | Google Analytics | Distinguishes visits for anonymous usage statistics (analytics) | Up to 2 years |
| Affiliate referral | Lemon Squeezy | Credits the affiliate who referred you (marketing) | Up to 30 days |
Analytics and affiliate cookies are only set if you choose Accept in the cookie banner. Your choice is saved in your browser's local storage (bt_consent_v1) so you are not asked again. You can change your mind at any time with the Cookies link in the footer; choosing Reject removes the Google Analytics cookies.
You can also delete or block cookies in your browser settings. Blocking the strictly necessary cookies means you will need to re-enter your licence key to download content.
Who I share data with
I only share personal data with the services needed to run this site:
- Netlify: website hosting.
- Google: Google Analytics.
- Lemon Squeezy: payments, licence keys and affiliate tracking.
Some of these providers are based in, or process data in, the United States. Where data leaves the European Economic Area, it is protected by appropriate safeguards such as the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
I may also disclose data if required by law.
How long I keep it
- Analytics data: up to 14 months, then deleted automatically.
- Order records: as long as required for tax and accounting law (usually several years).
- Emails: as long as needed to deal with your enquiry, and no longer than two years after our last contact unless related to a purchase.
- Licence access cookies: 90 days in your browser.
Your rights
Under the GDPR you have the right to access the personal data I hold about you, to have it corrected or erased, to restrict or object to its use, to receive it in a portable format, and to withdraw consent at any time without affecting earlier processing. To exercise any of these rights, email me@ben-toms.com. I will reply within one month. For purchase data held by Lemon Squeezy you can also contact them directly.
If you are unhappy with how your data is handled, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, or the authority in the country where you live.
Children
This site is aimed at professional developers and is not intended for children under 16.
Changes
If I change how personal data is used, I will update this page and the date at the top.