Privacy Policy

1. Introduction

This Privacy Policy explains how Discipline Vault (“we”, “us”, or “our”) handles personal information when you visit our website, create an account, obtain a free resource, purchase a product, subscribe to a membership, contact support, or interact with our content.

The operator of Discipline Vault is responsible for the handling described in this policy, except where a third-party provider handles information independently under its own privacy policy.

2. Information We Collect

Depending on how you use the Services, we may collect:

• Identity and contact information, such as your name and email address
• Account information and login-related records
• Purchase, subscription, order, cancellation, and transaction information
• Support messages, survey responses, and information you submit through forms
• Marketing preferences and email-engagement information
• Technical information, including IP address, browser, device, approximate location, referring page, pages viewed, links clicked, and interaction data
• Security, fraud-prevention, and access logs

Payment providers process payment-card and financial information. We do not store complete payment-card details.

3. How Information Is Collected

We collect information directly from you, automatically through the website and related technologies, and from providers that support accounts, checkout, content delivery, analytics, security, and communications.

4. How We Use Information

We may use personal information to:

• Provide accounts, products, downloads, memberships, and customer support
• Process and record orders, payments, renewals, cancellations, and refunds
• Send service messages about access, security, purchases, and billing
• Send marketing messages where permitted and manage opt-out preferences
• Measure website use, improve content, and understand product performance
• Prevent fraud, account abuse, unauthorised access, and content misuse
• Comply with legal, accounting, tax, and dispute-resolution obligations

5. Legal Bases Where Applicable

Where a law requires us to identify a legal basis, we may process information because it is necessary to perform a contract with you, comply with a legal obligation, pursue legitimate interests such as security and service improvement, or because you have given consent. The basis depends on the information and purpose.

You may withdraw consent where processing relies on consent, but withdrawal does not affect processing already carried out lawfully.

6. Email Communications

We may send essential service emails concerning account access, purchases, billing, security, or changes to a Service you use. Where permitted, we may also send marketing or educational emails.

You can unsubscribe from marketing by using the link in the email. Unsubscribing from marketing does not stop essential service messages.

7. Providers We Use

Our current website and delivery setup may involve:

• Podia for customer accounts, checkout, digital-product delivery, memberships, and related communications
• Cloudflare for website hosting, content delivery, security, performance, and traffic information
• Google Analytics 4 for website measurement and interaction analytics
• Payment providers available through the checkout platform, such as Stripe or PayPal when selected, for payment processing and fraud prevention

These providers may process information under their own privacy terms. We may replace or add providers as our Services change, and this policy will be updated when the change is material.

8. Payments

Payment information is processed by the payment provider offered at checkout. We may receive order status, transaction identifiers, amount, currency, payment status, and limited billing information, but we do not receive or store complete card details.

9. Cookies, Analytics, and Similar Technologies

We use essential technologies needed to operate, secure, deliver, and navigate the website and to remember your analytics preference. Essential technologies remain active because the website cannot provide these functions reliably without them.

Google Analytics 4 does not load on this website unless you choose “Accept analytics” or enable Analytics through the preferences panel. If enabled, GA4 may measure general page views and neutral offer-button activity. Our website configuration disables Google advertising storage, ad-user-data consent, ad-personalisation consent, Google Signals, and personalised-advertising signals.

The website analytics code is designed not to send form answers, email addresses, detailed support messages, or intimate personal information to GA4. You may reject non-essential analytics initially or change your choice later by selecting “Analytics preferences” in the website footer. Withdrawing permission stops the website from loading GA4 on future page views and removes common GA cookies where technically possible.

Cloudflare may still process limited technical, security, and traffic information as part of website delivery and protection. Browser settings may provide additional controls, but blocking essential technology may affect website operation.

10. Sharing and Disclosure

We do not sell personal information. We may disclose information to providers that help operate the Services; professional advisers where reasonably necessary; authorities where legally required; or another organisation involved in a genuine merger, acquisition, financing, or transfer of the business.

We may also disclose information where reasonably necessary to investigate fraud, protect users or systems, enforce agreements, or respond to lawful requests.

11. International Processing and Transfers

Some providers may process or store information outside your country, including in the United States and other locations where they or their subprocessors operate. Privacy protections in another country may differ from those in your location.

Where required, we take reasonable steps or rely on appropriate contractual or legal safeguards for international transfers. Contact us if you need more information about a relevant transfer.

12. Data Security and Breach Response

We use reasonable administrative, technical, and organisational safeguards appropriate to the information we handle. No online service can guarantee complete security, and you are responsible for keeping your login details secure.

If a data breach occurs, we will investigate it and notify affected individuals or authorities where required by applicable law.

13. Data Retention

We retain information only for as long as reasonably needed for the purposes described in this policy and any applicable legal, accounting, tax, fraud-prevention, or dispute-resolution requirements.

• Account information may be retained while the account is active and for a reasonable period afterward.
• Purchase, billing, and tax records are retained for the period required by applicable law.
• Support records may be retained for up to 24 months after a matter is closed, unless a longer period is reasonably required.
• Marketing preferences may be retained until you opt out, after which we may keep a suppression record so we can respect that choice.
• Analytics information is retained according to the settings and policies of the analytics provider.

We delete or anonymise information when it is no longer reasonably required.

14. Your Privacy Rights

Depending on your location and applicable law, you may have rights to request access, correction, deletion, restriction, objection, withdrawal of consent, marketing opt-out, or a portable copy of certain information. You may also have the right to complain to a privacy or data-protection authority.

Rights may be subject to legal exceptions. We may request information needed to verify your identity before acting on a request.

15. Privacy Requests and Complaints

Email support@disciplinevault.com with “Privacy Request” in the subject line. Explain your request and include enough information for us to identify the relevant account or interaction. Do not send complete card information.

We usually acknowledge privacy enquiries within 2 business days and aim to provide a substantive response within 30 days, unless a different timeframe applies by law or the request is unusually complex.

If you are not satisfied with our response, you may be entitled to contact the privacy or data-protection authority in your location.

16. Children’s Privacy

Discipline Vault is intended for adults aged 18 and over. We do not knowingly collect personal information directly from children. If you believe a child has provided information without appropriate authorisation, contact us so we can investigate and delete it where appropriate.

17. Third-Party Links

The website may link to third-party websites or services. Their privacy practices are governed by their own policies, and we are not responsible for their content or handling of information.

18. Changes to This Policy

We may update this policy when our Services, providers, or legal obligations change. We will post the revised policy with a new “Last updated” date and provide additional notice where required.

19. Contact

For privacy questions, requests, or complaints, email support@disciplinevault.com. We usually respond within 2 business days, Monday to Friday, excluding public holidays.