Skip to content
RMBC Swipe File

Privacy Policy

Last updated: March 2026

Data Controller

The data controller responsible for your personal data is:
[Company Name]
Email: privacy@[domain]

Data Collection

We collect personal information you voluntarily provide, specifically your email address when you sign up for free access to the RMBC Swipe File via our popup form. We also collect standard server logs automatically (IP address, browser type, pages visited) through our hosting infrastructure, which are retained by our hosting provider (Vercel) as part of normal web server operation.

How We Use Your Data

We use the data we collect to:

  • Grant access to swipe file content
  • Send transactional and marketing emails (see Email Communications below)
  • Improve site performance and diagnose technical issues
  • Comply with legal obligations

We do not sell your personal information to third parties.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases:

  • Consent — When you voluntarily submit your email address via our signup form, you consent to receiving emails and having your address stored to grant access to content.
  • Legitimate interest — We process server logs and usage data as necessary for the legitimate interests of operating, securing, and improving the site, where those interests are not overridden by your data protection rights.
  • Legal obligation — We may process data to comply with applicable laws and regulations.

You may withdraw your consent at any time by unsubscribing from emails or contacting us to request account deletion. Withdrawal does not affect the lawfulness of processing performed before withdrawal.

Email Communications

By providing your email address, you agree to receive emails from us including access confirmations, new content notifications, and occasional marketing messages related to copywriting and direct response. You may unsubscribe at any time via the link in any email we send.

Cookies

This site uses a single functional cookie:

  • subscribed — A flag cookie that records whether you have signed up for access. This cookie expires after 365 days. It is strictly functional (used to suppress the signup popup) and does not track your activity or identify you across sites.

We do not use analytics, advertising, or cross-site tracking cookies. You can disable cookies in your browser settings, though the signup popup may reappear on each visit if you do.

Third-Party Services

We use the following third-party services to operate this site. Your data may be shared with these providers as necessary to deliver the service:

  • Supabase (US) — database hosting. Your email address is stored in Supabase. See Supabase Privacy Policy.
  • Vercel (US) — website hosting. Vercel processes server logs (IP address, request data) as part of hosting. See Vercel Privacy Policy.
  • ActiveCampaign (US) — email marketing automation (if configured in future). Your email address may be shared with ActiveCampaign for email delivery. See ActiveCampaign Privacy Policy.

International Data Transfers

Your personal data is processed and stored in the United States via our service providers (Supabase and Vercel). If you are located outside the United States, please be aware that your data will be transferred to, stored, and processed in the US, where data protection laws may differ from those in your jurisdiction. By providing your email address, you acknowledge this transfer. Where required by GDPR, we rely on our providers' Standard Contractual Clauses (SCCs) or other approved transfer mechanisms.

Data Retention

We retain your email address and access records for as long as your account is active or as needed to provide services. Server logs are retained according to our hosting provider's standard retention policies. You may request deletion at any time by contacting us.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access — Request a copy of the personal data we hold about you.
  • Rectification — Request correction of inaccurate data.
  • Erasure — Request deletion of your personal data.
  • Restriction — Request that we restrict processing of your data.
  • Data portability — Request your data in a structured, machine-readable format.
  • Objection — Object to processing based on legitimate interest.
  • Withdraw consent — Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at the address below. We will respond within 30 days (or within the timeframe required by applicable law).

Right to Lodge a Complaint (GDPR)

If you are located in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data violates applicable law. A list of EEA supervisory authorities is available at edpb.europa.eu.

Your California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

  • Right to know — You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to delete — You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions.
  • Right to opt-out of sale — You have the right to opt out of the "sale" of your personal information. We do not sell your personal information to third parties as defined under the CCPA.
  • Right to non-discrimination — We will not discriminate against you for exercising any of your CCPA rights.

Do Not Sell My Personal Information: We do not sell, rent, or share your personal information for monetary or other valuable consideration. Because we do not sell personal information, no opt-out mechanism is required, but we include this disclosure for transparency.

Categories of personal information collected in the preceding 12 months: Identifiers (email address); Internet or network activity (server logs via hosting provider).

To exercise your CCPA rights, contact us at the address below. We will verify your identity before fulfilling your request. You may also designate an authorized agent to make a request on your behalf.

Children's Privacy

This site is not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the site after changes are posted constitutes acceptance of the updated policy.

Contact

For privacy-related questions, data subject requests, or complaints, contact:
[Company Name]
Email: privacy@[domain]

Note: This policy will be finalized when the product domain is confirmed.