ACSIS via Gumroad Cookies / Privacy Policy

Effective date: 24 June 2025

Last updated: 1 January 2026

ACSIS Life Coaching is committed to protecting your privacy and handling your data transparently and responsibly—no matter where in the world you download our content. This privacy policy explains how we collect, use, store, and share your personal data when you download the FORGE guide via Gumroad.

Who we are

Data Controller: Samantha Kinsey-Briggs (ACSIS Life Coaching Ltd)

ICO registration (data protection fee) reference: ZC037006

Registered office: Orange Cottage, Bletchinglye Lane, Rotherfield, Crowborough, England, TN6 3NN

Email: contact@acsis.co.uk

Website: www.acsis.co.uk

ACSIS Life Coaching is a UK-based coaching organisation providing veteran-informed tools for mental resilience and personal growth. We operate internationally and process personal data in accordance with the UK GDPR, and where applicable the EU GDPR and relevant local privacy laws.

What this policy covers

This policy applies to personal data we receive and process when you download the FORGE guide via Gumroad, and any follow-up communications you choose to opt into.

Gumroad is a separate service provider/platform. Gumroad will also process your data under its own privacy and cookie policies. Please review Gumroad’s policies to understand how it collects and uses your data on its platform.

What data we collect

When you download FORGE via Gumroad, we may receive from Gumroad:

Your email address
Your name (if entered)
Your country/region (if provided by Gumroad)
Basic download/activity details (for example, confirmation that a download occurred and the time/date)

If you contact us directly (for example by email), we will also process:

The content of your message and any information you choose to share

Payment data: If the guide is free, we do not receive payment card details. If Gumroad offers paid products separately, payment information is processed by Gumroad and/or its payment partners and is not provided to us in full.

How we use your information

We use the data we receive for the following purposes:

To deliver the FORGE guide and administer access or re-sends if requested
To track downloads and measure the reach and effectiveness of the resource
To improve our coaching materials and service delivery
To produce reporting and aggregated insights (for example total downloads, general geographic distribution), including reporting to stakeholders where relevant (for example programme evaluation and impact reporting)

Follow-up and marketing:

We do not use your personal data for marketing unless you have explicitly opted in (for example by ticking an opt-in box or subscribing separately).
Where you opt in, we may contact you with additional free tools, updates, or occasional feedback requests. You can unsubscribe at any time.

Lawful bases for processing (UK/EU)

Where UK GDPR/EU GDPR applies, we process your personal data on the following lawful bases:

Performance of a contract / steps at your request: to provide the guide you requested and manage access/support queries
Legitimate interests: to understand resource uptake, improve our materials, maintain service security, and produce internal/impact reporting (balanced against your rights)
Consent: where you choose to opt in to marketing or non-essential follow-ups
Legal obligation: where we must keep certain records to comply with law (for example accounting, fraud prevention, or responding to lawful requests)

You can withdraw consent at any time (see “Your rights” below). Withdrawal of consent does not affect processing that occurred before you withdrew it.

Your rights (UK and worldwide)

UK users (UK GDPR)

You have rights including:

Access: request a copy of the personal data we hold about you
Rectification: correct inaccurate or incomplete data
Erasure: request deletion of your data (where applicable)
Restriction: ask us to limit how we use your data in certain situations
Portability: receive your data in a usable format (in certain circumstances)
Objection: object to certain processing, including direct marketing
Withdraw consent: where we rely on consent (for example marketing opt-in)

International users

Depending on your location, you may have similar or additional rights under local laws. Where applicable, we will honour valid requests in line with the law that applies to your situation.

How to exercise your rights

Email contact@acsis.co.uk with:

your full name
the email address used on Gumroad (or the one you believe you used)
what you want to do (access, correction, deletion, objection, etc.)

We may need to verify your identity before completing a request.

Important note on deletion:

If you ask us to delete your data, we will do so where we have no lawful reason to keep it. In some cases we may retain limited information (for example a minimal suppression record so we don’t email you again after an opt-out, or records required for legal or reporting purposes).

Data storage and security

Your data is stored on Gumroad’s systems and accessed by ACSIS via a password-protected dashboard and/or secure exports where needed. We take reasonable technical and organisational precautions to prevent loss, misuse, unauthorised access, or alteration of your personal data, including limiting access to authorised personnel only.

How long we keep your data (retention)

We keep personal data only as long as necessary for the purposes described in this policy.

Typical approach:

Download/admin records: kept for as long as needed to measure engagement and produce reporting, then deleted or anonymised
Opt-in marketing records: kept until you unsubscribe (and we may keep a minimal suppression record afterwards)
Communications: kept for a reasonable period to manage queries and maintain service records, then deleted or anonymised
Backups: even where we delete data from active systems, it may remain in secure backups for a limited period until rotated

If you want more detail about retention for your specific situation, email contact@acsis.co.uk.

International data transfers

Because Gumroad and its infrastructure may operate globally, your data may be stored or processed outside your country of residence, including in the United Kingdom or the United States.

Where international transfers occur, we take steps designed to ensure appropriate safeguards are used (for example contractual protections and vendor due diligence) to protect personal data across borders.

Third parties

We do not sell your personal information.

We may share personal data only where necessary, such as:

With Gumroad (as the platform facilitating downloads and communications on that platform)
With service providers we use for communications or administration, if you opt in and if required to deliver the service
With professional advisers (for example legal or accounting) where necessary
With authorities where required by law

We may share anonymised and aggregated statistics (for example total downloads by country/region) for research or reporting.

Cookies

ACSIS does not place cookies through Gumroad. However, Gumroad may use cookies or similar technologies to operate its platform, improve user experience, and monitor platform performance. Please refer to Gumroad’s cookie policy for details and options.

Children and minors

The FORGE guide and ACSIS services are intended for adults and are not directed at children.

We do not knowingly collect personal data from children. If you are under the age at which consent is valid in your country (for example under 13 in the United States, or under 16 in some jurisdictions), please do not submit personal data without a parent/guardian’s involvement. If you believe a child has provided us with personal data, please email contact@acsis.co.uk and we will take appropriate steps to delete it.

Complaints

If you are unhappy with how we handle your data, please contact us first at contact@acsis.co.uk so we can try to resolve it.

UK users can also complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection. International users may also have the right to complain to their local data protection regulator.

Updates to this policy

We may update this policy periodically. When we do, we will update the “Last updated” date above and, where appropriate, notify users who have opted in.