Privacy Policy
Last updated: 2 September 2026
Karolis Stasiūnas ("I", "me") operates karolisstasiunas.com as a sole trader based in London, United Kingdom. This policy explains what personal data I collect, why, and what rights you have over it — under UK GDPR, EU GDPR, and the California Consumer Privacy Act (CCPA) where applicable.
1. Who I am
Data controller: Karolis Stasiūnas, sole trader, [REGISTERED BUSINESS ADDRESS — TO CONFIRM], United Kingdom.
Contact: karolis.founder.sl@gmail.com
2. What I collect
- Contact details — name and email, when you join the newsletter or request a free resource.
- Consent record — the fact that you ticked the consent box, plus the time, the page you were on, your IP address and browser user-agent string. This is stored as proof that consent was freely given, which UK GDPR requires me to be able to demonstrate.
- Purchase details — billing name, email, and transaction data, when you buy a product. Card details are processed directly by Stripe; I never see or store your full card number. (No products are on sale yet, so nothing of this kind is collected today.)
- Usage data — pages visited, referring site, country-level location, device and browser type, collected in aggregate and without cookies.
- Anything you send me directly — if you email me.
3. Why I collect it
- To send the newsletter and deliver free resources — legal basis: consent.
- To process and fulfil purchases — legal basis: contract.
- To keep a record that consent was given, and to block automated abuse of the signup form — legal basis: legal obligation and legitimate interest.
- To understand how the site is used and improve it — legal basis: legitimate interest.
- To respond to enquiries — legal basis: legitimate interest / consent.
4. Who I share it with
I don't sell your data. It's shared only with the tools that run the site:
- GoHighLevel — email and CRM automation for the newsletter and free-resource delivery.
- Stripe — payment processing, once paid products go live.
- Cloudflare Web Analytics — site analytics. It is cookieless and does not track individuals across sites or build a profile of you.
- Hostinger — web hosting. Standard server logs sit with them.
- Google Fonts — the site's typefaces are served from Google's font CDN, which means your IP address is visible to Google when a page loads. No cookies are set by it.
Each of these processors has its own privacy policy and may store data outside the UK/EU; where that happens, it's covered by Standard Contractual Clauses or an equivalent safeguard.
5. How long I keep it
Newsletter and purchase data is kept for as long as you're subscribed or for as long as required by UK tax law (typically 6 years for financial records), whichever is longer. The temporary rate-limit record used to block form abuse holds only a hashed form of your IP address and is discarded within minutes. You can ask for deletion at any time (see Section 6).
6. Your rights
If you're in the UK or EU (GDPR): you have the right to access, correct, delete, restrict, or port your data, to object to processing, and to withdraw consent at any time. To exercise any of these, email karolis.founder.sl@gmail.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local EU data protection authority.
If you're in California (CCPA): you have the right to know what personal information is collected, to request deletion, and to opt out of any sale of personal information. I don't sell personal information. To exercise these rights, email karolis.founder.sl@gmail.com.
Every email I send carries a one-click unsubscribe link. Using it withdraws your consent immediately.
7. Cookies
This site sets no cookies at all. See the Cookie Policy for the detail.
8. Children
This site isn't directed at anyone under 16. I don't knowingly collect data from children.
9. Changes
I'll update the date at the top of this page if this policy changes materially.