Privacy Notice

Last updated: June 15, 2026

1. Who We Are

This Privacy Notice describes how Clay Mercey ("we", "us", "our") collects, uses, and shares your personal data when you visit our site or purchase The Wayfarer's Remedy Book. For the personal data described below, Clay Mercey is the data controller.

2. Data We Collect

• Account data: name, email address, login credentials, account creation date.
• Order data: product purchased, order ID, purchase date (payment details are handled by Stripe — see below).
• Support data: messages you send us through support channels.
• Usage & device data: IP address, browser type, device identifiers, pages visited, and basic telemetry.

3. How We Use Your Data

• To create and manage your account and provide access to the Product (legal basis: performance of contract).
• To deliver the digital download you purchased (performance of contract).
• To respond to support inquiries (legitimate interests).
• To detect and prevent fraud, abuse, and security incidents (legitimate interests, legal obligation).
• To improve our Product and website (legitimate interests).
• To send transactional emails about your order or account (performance of contract).

4. Who We Share Data With

• Stripe — our Merchant of Record. Stripe handles all payments, billing, tax compliance, invoicing, and refunds. Stripe collects payment information directly from you and is the data controller for that data. See Stripe's Privacy Policy.
• Hosting & infrastructure providers — for site hosting, database storage, and file delivery.
• Email & analytics providers — for transactional email delivery and basic site analytics.
• Professional advisers — legal, accounting, or compliance advisers, where necessary.
• Authorities — where required by law or to protect our rights.

5. Data Retention

We keep your personal data for as long as your account is active and for a reasonable period afterward to comply with legal, tax, and accounting obligations. When data is no longer needed, it is deleted or anonymized.

6. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict processing of, or port your personal data, and to object to processing or withdraw consent. To exercise these rights, contact us through the support channel on this site. You may also have the right to lodge a complaint with your local data protection authority.

7. International Transfers

Your data may be processed in countries outside your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to protect your data during international transfers.

8. Security

We use appropriate technical and organizational measures — including encryption in transit, access controls, and secure authentication — to protect your personal data against unauthorized access, loss, or misuse.

9. Cookies

We use essential cookies to keep you signed in and to operate the site. We may also use limited analytics cookies to understand how the site is used. You can manage cookie preferences through your browser settings.

10. Changes to This Notice

We may update this notice from time to time. The "Last updated" date at the top reflects the most recent revision.

11. Contact

For privacy questions or to exercise your rights, contact us through the support channel listed on this site.