Privacy Policy
Patinaverse LLC — an imprint of Human Universes LLC
Effective Date: October 15, 2026 Last Updated: October 15, 2026 Version: 2.0
1. Who We Are
Patinaverse LLC ("Patinaverse," "we," "us," or "our") is a Delaware limited liability company and the data controller responsible for the personal information described in this Policy. Patinaverse LLC is a wholly owned subsidiary of Human Universes LLC, a Delaware intellectual property holding company that is non-operating and conducts no publishing activity.
Contact for all privacy matters: [email protected] Postal address: Patinaverse LLC, 5536 Princeton Road, Macungie, PA 18062-9053, United States
This Policy explains how we collect, use, disclose, and safeguard personal information when you visit patinaverse.com (the "Site") or purchase our publications.
2. Scope
This Policy applies to the Site and to purchases made directly through the Site. It does not apply to purchases made through third-party retailers (Amazon Kindle Direct Publishing, Gumroad, Payhip), which operate under their own privacy policies and are independent controllers of any data you provide to them.
3. Categories of Personal Information We Collect
| Category (CCPA/CPRA terminology) | Examples | Source | Purpose | Retention |
|---|---|---|---|---|
| Identifiers | Email address | You, at checkout or newsletter signup | Order fulfillment; marketing (opt-in only) | Until deletion request or unsubscribe |
| Commercial information | Products purchased, price tier, transaction status, Stripe customer reference | You / Stripe | Order fulfillment, tax and accounting records | 7 years (tax law) |
| Financial information | Payment card details | Collected directly by Stripe — never transmitted to or stored by us | Payment processing | Held by Stripe per its retention policy |
| Internet activity | IP address, browser type, request timestamps | Automatically, via Cloudflare | Security, fraud prevention, DDoS mitigation | Per Cloudflare's standard log retention |
| Aggregate usage data | Page views, referrer, coarse geographic region | Cloudflare Web Analytics (cookieless, no fingerprinting, no individual tracking) | Understanding aggregate Site performance | Aggregate only; not linked to individuals |
We do not collect: government identifiers, precise geolocation, biometric data, health data, or any special category / sensitive personal information as defined under GDPR Article 9 or CPRA.
Important clarification regarding your assessment responses. The DBAM workbook is a printable and downloadable document. Your answers, scores, and written reflections are recorded by you on your own copy. We never receive, transmit, store, or have any access to your assessment responses or results. No answers are submitted to us or to any server.
4. Legal Bases for Processing (GDPR / UK GDPR)
| Processing activity | Legal basis |
|---|---|
| Fulfilling your order and delivering your purchase | Performance of a contract (Art. 6(1)(b)) |
| Sending marketing emails | Consent (Art. 6(1)(a)) — withdrawable at any time |
| Retaining transaction records | Legal obligation (Art. 6(1)(c)) — tax and accounting law |
| Security logging, fraud and abuse prevention | Legitimate interests (Art. 6(1)(f)) — operating a secure service |
| Aggregate, cookieless analytics | Legitimate interests (Art. 6(1)(f)) — no individual profiling occurs |
5. Cookies and Tracking
Full detail is provided in our separate Cookie Policy, incorporated here by reference.
In summary: no non-essential cookies are set until you affirmatively consent via our cookie banner. We use no advertising cookies, no cross-site tracking, and no data brokers. Consent can be withdrawn at any time via the "Cookie Preferences" link in the Site footer.
Global Privacy Control (GPC). We honor the Global Privacy Control browser signal. If your browser transmits a GPC signal, we treat it as a valid opt-out of any sale or sharing of personal information, and as a withdrawal of non-essential cookie consent, without requiring any further action from you.
Do Not Track. There is no industry-accepted standard for responding to Do Not Track browser signals. We do not track users across third-party websites, so no such tracking exists to disable.
6. How We Share Information
We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We have not done so in the preceding twelve months.
We disclose personal information only to the following processors/service providers, each bound by contract to process data solely on our instructions:
| Provider | Role | Data disclosed | Location |
|---|---|---|---|
| Stripe, Inc. | Payment processing | Payment details, email, transaction records | United States |
| Klaviyo, Inc. | Email marketing (opt-in only) | Email address, engagement metrics | United States |
| Cloudflare, Inc. | Hosting, CDN, security, analytics | IP address (security only), aggregate traffic | Global edge network |
| Supabase, Inc. | Product catalog, order references, secure file delivery | Order references, signed download URLs | United States (us-east-1) |
We may also disclose personal information where required by law, valid legal process, or to establish, exercise, or defend legal claims.
In the event of a business transfer (merger, acquisition, or sale of assets), personal information may be transferred as part of that transaction. You will be notified via email and a prominent Site notice before your information becomes subject to a different privacy policy.
7. International Data Transfers
We operate from the United States, and our processors are primarily US-based. If you access the Site from the European Economic Area, United Kingdom, Switzerland, or elsewhere outside the US, your personal information will be transferred to and processed in the United States.
For transfers from the EEA and UK, we rely on the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, as incorporated into our agreements with Stripe, Klaviyo, Cloudflare, and Supabase. Copies of the relevant transfer mechanisms are available on request at [email protected].
8. Your Rights
8.1 All users
You may, at any time and free of charge: access the personal information we hold about you; correct inaccuracies; request deletion; obtain a portable copy; object to or restrict processing; and withdraw marketing consent.
To exercise any right: email [email protected] with the subject line "Privacy Request." We will verify your identity by confirming control of the email address associated with your record — we will not request additional identity documents for this purpose.
Response times: within 30 days (GDPR/UK GDPR), within 45 days with one permitted 45-day extension (CCPA/CPRA), or sooner where practicable.
No discrimination. We will never deny service, charge a different price, or provide a different quality of service because you exercised a privacy right.
Authorized agents. California residents may use an authorized agent to submit requests, accompanied by written permission.
8.2 European Economic Area / United Kingdom
In addition to the rights above, you have the right to lodge a complaint with your local supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk). A list of EEA supervisory authorities is maintained by the European Data Protection Board (edpb.europa.eu). We would appreciate the chance to address your concern first, but this does not limit your right to complain.
8.3 California (CCPA/CPRA)
The categories of personal information we collect, our purposes, sources, retention periods, and the categories of third parties to whom we disclose are set out in Section 3 and Section 6 above. We do not sell or share personal information, and we do not process sensitive personal information for purposes requiring a limitation right.
8.4 Other jurisdictions
Residents of Virginia, Colorado, Connecticut, Utah, and other US states with comprehensive privacy laws, as well as residents of Canada (PIPEDA), Australia, and Brazil (LGPD), may exercise substantially equivalent rights using the same contact method above. We apply one consistent standard globally rather than tiering rights by geography.
9. Data Retention
- Order records: seven (7) years, as required by US tax and accounting law.
- Marketing contacts: until you unsubscribe or request deletion.
- Security logs: per Cloudflare's standard rolling retention.
- Deleted data: removed from active systems promptly upon a valid request, except where retention is required by law (in which case we retain only the minimum necessary and cease all other processing).
10. Data Security
We maintain safeguards appropriate to the sensitivity of the data we hold, including: TLS encryption in transit; PCI-DSS-compliant payment processing where card data never reaches our infrastructure; row-level security on our database; multi-factor authentication on all administrative access; signed, time-limited download URLs; and an incident response procedure.
Breach notification. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours where required, and notify affected individuals without undue delay.
No system is perfectly secure, and we cannot guarantee absolute security.
11. Children's Privacy
The Site and our publications are intended for adults. We do not knowingly collect personal information from anyone under 16, and our products are not directed to children. If you believe a child has provided us personal information, contact [email protected] and we will delete it promptly.
12. Automated Decision-Making
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects concerning you.
13. Changes to This Policy
We will post any revised Policy on this page with an updated "Last Updated" date. For material changes affecting how we use your personal information, we will provide advance notice by email to subscribers and a prominent Site notice, and where required by law, obtain fresh consent.
14. Contact
Patinaverse LLC An imprint of Human Universes LLC 5536 Princeton Road, Macungie, PA 18062-9053, United States [email protected]
© 2026 Human Universes LLC. All rights reserved. Published under the PATINAVERSE imprint.