Privacy Policy
Last updated: October 24, 2026
1. Who we are
This website is operated by SparkLlama LLC (“SparkLlama”, “we”, “us”), which is the data controller responsible for your personal data.
You can reach us through our contact form or by post at [registered address].
We value your privacy and are committed to protecting your personal information. This policy explains what we collect, why, how long we keep it, and what you can ask us to do with it.
2. What we collect
Information you give us
- Name and email address when you subscribe to our newsletter, download a free resource, or contact us.
- Account details (name, email, password) when you create an account to access purchased materials.
- Order information (name, email, billing address, items purchased) when you buy something.
- Messages you send through the contact form.
- Optional information you choose to share, such as the ages of your children when you reply to a welcome email.
Information collected automatically
When you visit the site we collect limited technical information: browser type, device type, approximate location derived from IP address, pages viewed, and the site or search term that referred you. We use this to understand how the site is used and to detect abuse.
We do not attempt to identify individual visitors from this information.
Payment information
We never see or store your full card details. Payments are processed by a third-party payment provider (see section 7).
3. Why we process your data, and on what legal basis
| What we do | Why | Legal basis (GDPR) |
|---|---|---|
| Deliver a free resource you requested | To give you what you asked for | Performance of a contract |
| Send our newsletter | Because you subscribed | Consent |
| Process an order and deliver files or access | To complete the sale | Performance of a contract |
| Provide customer support | To help you and resolve problems | Legitimate interest |
| Keep records of sales | Legal and tax obligations | Legal obligation |
| Understand how the site is used | To improve the site | Legitimate interest |
| Prevent fraud and abuse | To protect the site and our users | Legitimate interest |
We process only the data necessary to operate the website, deliver purchases, and provide our services.
You can browse the site without identifying yourself. To receive the newsletter, purchase a product, create an account, or contact us, you need to provide certain data.
4. Cookies and similar technologies
Cookies are small files stored on your device. We use them for:
- Essential functions — keeping you logged in, remembering your cart, and protecting forms from abuse. These cannot be switched off without breaking the site.
- Analytics — understanding which pages are visited and how visitors arrive. [Remove this line if you do not install an analytics tool.]
We do not use cookies for advertising, and we do not run advertising or tracking pixels from social networks.
You can control or delete cookies through your browser settings. Blocking essential cookies may prevent parts of the site from working, including login and checkout.
[If you install Google Analytics, insert here: Where required by law, we ask for your consent before setting analytics cookies, and you can withdraw it at any time.]
5. Email marketing
We use Kit (Kit, LLC, United States) to manage our email list and send newsletters and sequences.
When you subscribe, you give consent to receive emails from us. Every email we send includes a one-click unsubscribe link and our postal address. You can also ask us to delete your data at any time.
We do not sell, rent, or share our email list with anyone.
6. Accounts and purchased materials
If you create an account, we store your name, email address, and a securely hashed password, along with a record of what you have purchased or been granted access to.
Access to purchased materials is personal and non-transferable. To protect the library, we may log access events (date, time, and IP address) and use them to detect credential sharing. This processing is based on our legitimate interest in protecting our intellectual property.
You may request deletion of your account at any time. Deleting your account ends access to access-based products but does not affect files you have already downloaded.
7. Payments
If you pay by card on this site: payments are processed by Stripe (Stripe, Inc., United States). Stripe receives your payment details directly and acts as an independent controller for fraud prevention and regulatory purposes. We receive only a confirmation of payment and limited transaction details (amount, last four digits, billing country). Stripe’s privacy policy is available at stripe.com/privacy.
If you purchase through Gumroad: the transaction is handled by Gumroad, which acts as the seller of record for that purchase. Gumroad’s own privacy policy governs the payment data it collects. We receive your email address and order details in order to support you and, where you consent, to add you to our list.
8. Children’s privacy
This website is directed at adults. Our materials are designed for children, but purchases, accounts, and communications are the responsibility of a parent, guardian, or educator aged 18 or over.
We do not knowingly collect personal information from children under 13. We do not ask for a child’s name, photograph, voice, or date of birth. Where an age range is requested, it is optional and used only to recommend suitable materials.
If you believe a child has provided personal information to us, contact us and we will delete it promptly.
9. Who we share data with
We share data only with service providers who help us run the site, and only as far as needed:
| Provider | Purpose | Location |
|---|---|---|
| Hostinger | Website hosting and email infrastructure | European Union / United States |
| Kit | Email list and newsletter delivery | United States |
| Stripe or Gumroad | Payment processing | United States |
| Analytics and Search Console [only if installed] | United States |
Each provider processes data under its own terms and privacy policy and is bound by data processing agreements where required.
We may also disclose information when required by law: to comply with a subpoena or similar legal process, to protect our rights or the safety of others, to investigate fraud, or to respond to a lawful government request.
We do not sell your personal data.
10. International transfers
Some of our providers are located outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
11. How long we keep your data
- Newsletter subscribers: until you unsubscribe, then up to 30 days while suppression records are retained so we do not email you again by mistake.
- Customer and order records: for as long as required by tax and accounting law, typically seven years.
- Account data: until you ask us to delete it, or after three years of inactivity.
- Contact form messages: up to two years.
- Analytics data: as configured in the analytics tool, normally 14 months.
12. Your rights
If you are in the European Union or the United Kingdom, you have the right to:
- Be informed about how your data is used
- Access the data we hold about you
- Have inaccurate data corrected
- Have your data erased
- Restrict how we process your data
- Receive your data in a portable format
- Object to processing based on legitimate interest
- Withdraw consent at any time, without affecting processing already carried out
- Lodge a complaint with your national data protection authority
If you are a California resident, you have the right to know what personal data we collect and how we use it, to request deletion, to request correction, and to opt out of the sale or sharing of personal data. We do not sell personal data.
To exercise any of these rights, contact us through the form or by post. We will respond within 30 days and may ask you to verify your identity before acting on a request.
13. Security
We protect the personal information you provide using reasonable administrative, technical, and physical safeguards: encrypted connections (HTTPS), restricted administrative access with two-factor authentication, regular security updates, and encrypted backups stored off-site.
No transmission over the internet can be guaranteed to be completely secure. If a breach occurs that affects your rights, we will notify you and the relevant authority as required by law.
14. Links to other websites
Our site may link to websites we do not own or control. We are not responsible for their privacy practices. We encourage you to read the privacy policy of any external site you visit.
15. Changes to this policy
We may update this policy from time to time. The version in force is the one published on this page, with the revision date shown at the top. Material changes will be announced on the site or by email to subscribers before they take effect.
16. Contact
Questions about this policy, or to exercise your rights:
Use the contact form: SparkLlama Contact Form
This form delivers directly to our support inbox. We aim to respond within two business days.
Legal and postal correspondence: SparkLlama LLC, 2730 S. Wadsworth Blvd. Suite A #1010 Denver, CO 80227