1. Who we are and what this covers
Jasmine Wonders (“we”, “us”) operates this website and online course reader. This policy covers personal information we process when you browse the site, buy Materials, open your reader, contact us or request your access links. Checkout is provided by Shopify, which also processes your data under its own privacy policy as described below.
2. Information we collect
Information you give us
- Order details — your name, email address, billing country and the products you bought, which Shopify shares with us when your payment is confirmed.
- Messages — your name, email and anything you include when you contact us.
- Access requests — the email address you enter to have your links re-sent.
Information collected automatically
- Technical data — IP address, browser type, device information and request logs recorded by our hosting provider for security, rate limiting and troubleshooting.
- Cart cookie — a strictly necessary cookie that remembers the contents of your cart. We do not use advertising or cross-site tracking cookies.
Payment information
Card and wallet details are entered directly into Shopify's secure checkout and processed by Shopify and its payment partners. We never receive or store your full payment card number.
3. How we use your information
- To process your order and deliver your private reader link by email (performance of a contract).
- To re-issue access links when you ask and to answer your support requests (contract / legitimate interests).
- To secure the service — preventing fraud, link sharing and abuse (legitimate interests).
- To keep records required for tax and accounting (legal obligation).
4. Who we share it with
We do not sell or rent your personal information. We share it only with service providers who help us run the store:
- Shopify — storefront commerce, checkout and payment processing (Shopify Privacy Policy).
- Email delivery provider — to send order and access emails.
- Microsoft Azure — secure hosting of this website, the reader and our order records.
We may also disclose information if required by law, to protect our rights or users, or as part of a business transfer, subject to this policy.
5. How long we keep it
We keep order records for as long as your access remains available and as required for tax and accounting purposes (typically up to seven years). Support messages are kept for up to two years. Server logs are kept for a limited period for security. When information is no longer needed it is deleted or anonymised.
6. Security
Your reader link contains a cryptographically signed, time-limited token. Course files are stored outside the public web root and are only streamed after the token is verified. Connections are encrypted with HTTPS. No system is perfectly secure, but we use industry-standard measures to protect your information.
7. Your rights and choices
Depending on where you live (for example under the GDPR, UK GDPR or US state privacy laws) you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You also have the right to complain to your local data protection authority.
To exercise these rights, contact us from the email address on your order. We will respond within the time required by law. Note that deleting your order data will also end your ability to request new access links.
8. International transfers
Our service providers may process information in countries other than your own. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.
9. Children
The store is intended for students and professionals aged 16 and over. We do not knowingly collect personal information from younger children. If you believe a child has provided us information, please contact us so we can delete it.
10. Changes and contact
We may update this policy and will revise the effective date above when we do. For any privacy question or request, please contact us.