Privacy Notice

• Email address — to create your account, send your sign-in and access links, deliver the product, and answer support requests. Legal basis: performance of our contract with you.
• Order details (order reference, amount, currency, status, date) — to confirm your entitlement, provide order history and handle refunds. Legal basis: contract performance and legal obligation.
• Access and issuance logs (which media link was issued to which email, when, and whether it was granted) — to protect the product against link sharing and fraud, and to support you when a link fails. Legal basis: our legitimate interest in securing our product.
• Technical data such as IP address and device or browser information, collected automatically by our hosting and security infrastructure — for security, abuse prevention and diagnosing faults. Legal basis: legitimate interests.
• Support messages you send us — to respond to you. Legal basis: legitimate interests and contract performance.

Payment card details are never collected or seen by us — they go directly to Paddle.

• Paddle, our Merchant of Record, for the sale of the product, payments, invoicing, tax compliance, refunds and billing support.
• Service providers and subprocessors who host the site, database, authentication and media storage on our behalf, and who send our transactional email.
• Professional advisers such as accountants or lawyers, where necessary.
• Authorities, where we are required to disclose by law.

We do not sell your personal data, and we do not send marketing email unless you ask us to.

Our providers may process data outside your country, including outside the UK and EEA. Where that happens, transfers are protected by appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Because The Pre-Flight Ritual is lifetime access, we keep your account and entitlement record for as long as you hold access. Order records are kept for as long as tax and accounting law requires. Access and issuance logs are kept while they remain useful for security, then deleted or anonymised. When data is no longer needed, we delete or anonymise it.

Subject to the law that applies to you, you may request access to your data, correction of inaccurate data, erasure, restriction of processing, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time. Email support@stcme.com and we will respond within one month. If you are in the UK or EEA, you also have the right to complain to your data protection supervisory authority.

We apply appropriate technical and organisational measures: media is stored in a private bucket and only ever served through short-lived signed links, access is scoped to your verified email address, database access is protected by row-level security, and data is encrypted in transit.

We use essential cookies and local browser storage only — to keep you signed in and to run the checkout. We do not use advertising cookies. Paddle may set cookies necessary for the checkout to function; you can manage or clear cookies at any time in your browser settings.