Privacy policy
Last updated: to fill: date of publication
This policy explains what personal data thousandamonth.com and the Thousand A Month email list collect, why, who processes it, and your rights. It is written to meet the EU General Data Protection Regulation (GDPR) and the UK GDPR, and to be plain enough to read in five minutes.
1. Who we are
The site and the email list are operated by Axenor Consulting (to fill: full registered legal name; registration number to fill: company registration number; to fill: registered office address and country), the data controller.
Contact for anything in this policy: to fill: privacy contact email.
2. What we collect, and why
| What | When | Why (purpose) | Legal basis |
|---|---|---|---|
| Your email address | You submit the Planner form | To send you the Thousand Planner and, after you confirm, our emails | Your consent (GDPR art. 6(1)(a)), given by clicking the confirm link |
The link you came from (the utm tags in the address, for example "youtube, pinned comment, episode 1") | You submit the form | To know which videos and placements bring people to the list, so we can make more of what works | Our legitimate interest in understanding our own audience (art. 6(1)(f)); it is stored with your subscriber record and deleted with it |
| Whether you open our emails and which links you click | You read our emails | To see which emails are useful and to show you the parts of the Planner that match your answer to "which month are you in?" | Your consent to receive our emails; you can stop it by unsubscribing |
| Your reply, if you reply to an email | You write back | To read and answer it, and to decide which stories to tell next | Our legitimate interest in answering messages sent to us |
| Your purchase details (name, email, billing country, payment details) | You buy the Year One Workbook | To sell and deliver the product, handle refunds and meet tax rules | Handled by our reseller as described in section 4 |
| Your order details (email, name, country, order number), received from our reseller | After you buy | To deliver support and refunds, and, if you are already a subscriber, to stop Workbook offers and send two how-to emails about the Workbook | Performance of the contract (art. 6(1)(b)) and our legitimate interest (art. 6(1)(f)); we never add a buyer to the list |
We do not ask for your name, phone number or address to give you the Planner. We never ask for bank logins, and nothing you type into the Planner or the Workbook comes to us: the files run on your own device or in your own Google account.
3. Cookies and tracking on this site
- No tracking or advertising cookies. This site sets no cookies by default. We do not use advertising pixels, and we do not sell or share your data for advertising.
- The opt-in page reads the
utmtags from its own web address and puts them into hidden fields of the form. This uses no cookie and is described in section 2. - On the Workbook page, the same
utmtags are added to the checkout link so the reseller records which page or email led to the order; no cookie is used. - Our host, to fill: web host (Cloudflare, Inc., if hosted on Cloudflare Pages), processes your IP address and basic request data to deliver the pages and protect the site from abuse, as any web server does.
- The checkout page is run by our reseller, not by this site, and has its own cookie and privacy terms (section 4).
4. Who processes your data
| Who | What they do | Where |
|---|---|---|
| Kit (Kit, formerly ConvertKit) to fill: Kit's legal entity name, as stated in its DPA | Stores the email list and sends our emails, as our processor under a data processing agreement. Kit records opens and clicks for us | United States; transfers covered by to fill: the transfer safeguard Kit's DPA names (for example the EU Standard Contractual Clauses and the UK addendum, or the EU-US Data Privacy Framework if Kit is certified) |
| Our web host to fill: web host (Cloudflare, Inc., if hosted on Cloudflare Pages) | Serves the site | to fill: where the host processes data, as stated in its DPA |
| Our reseller to fill: reseller and its legal entity (for example Lemon Squeezy (Link, LLC)) | Runs the checkout, takes payment, calculates and remits sales tax and VAT, sends your receipt and download links, and processes refunds. As the merchant of record it sells the product to you and is responsible for your purchase data under its own privacy policy: to fill: link to the reseller's privacy policy | to fill: where the reseller processes data, as stated in its policy |
We share your data with no one else, except where the law requires it.
5. How long we keep it
- The list: while you are subscribed. When you unsubscribe, we stop emailing you at once and delete your record within to fill: number of days (suggested 90) days, keeping only what we need to show you once consented and later withdrew, if the law requires it.
- Unconfirmed sign-ups (you never clicked the confirm link): deleted within to fill: number of days (suggested 30) days.
- Replies: for as long as needed to answer them, then deleted within to fill: number of months (suggested 12) months.
- Purchase records: kept by the reseller for as long as tax law requires.
- Our copy of order details and refund emails (the weekly order export and the messages you send us about an order): deleted within to fill: number of months (suggested 12) months.
6. Your rights
Under the GDPR and the UK GDPR you can:
- Access the data we hold about you, and get a copy (portability).
- Correct it if it is wrong.
- Delete it ("right to be forgotten").
- Restrict or object to how we use it, including the use based on our legitimate interest in section 2.
- Withdraw consent at any time: every email has a one-click unsubscribe link. Withdrawing does not affect what was done before.
To use any of these, email to fill: privacy contact email. We answer within one month.
You can also complain to a data protection authority. Ours is the Office of the Commissioner for Personal Data Protection in Cyprus to confirm: the lead authority for the operator's country of registration. In the UK it is the Information Commissioner's Office (ICO). In the EU you can also go to the authority in the country where you live.
If you live in a US state with its own privacy law (for example California), you have the right to know what we collect (this page), to ask us to delete it, and not to be discriminated against for asking. We do not sell or share personal information for cross-context advertising.
7. How we get your consent, and the Cyprus and Greece rule
- We use double opt-in: after you submit the form, we email you a confirm link, and we send our emails only if you click it. That click is our record of your consent.
- We email only people who confirmed this way. We do not buy lists, rent lists, import contacts from anywhere else, or email businesses or individuals who did not sign up.
- Consent is for Thousand A Month only. We do not add you to any other list run by Axenor Consulting or its partners, and we do not mail you about other brands.
- Cyprus and Greece require prior consent for marketing email, including to businesses. The double opt-in above is how we meet that rule for every subscriber, wherever they live.
- Buying the Workbook does not add you to the list.
8. Children
The site and the list are for adults. We do not knowingly collect data from anyone under 16. If you believe a child has signed up, email us and we will delete the record.
9. Changes
If we change this policy, we update the date at the top. If a change affects how we use your data, we tell subscribers by email before it applies.