Privacy Policy | Decoded Press

1. Who we are

Decoded Press is operated by Cam Hughes, based in Australia. ABN: 80 771 863 932. In this policy, ‘we’, ‘us’ and ‘our’ mean Cam Hughes trading as Decoded Press.

For privacy questions, requests or complaints, contact admin@decodedpress.com. This policy covers our website, book sales, sample requests and communications.

2. Information we collect

We receive information directly from you, through forms and communications, and from providers handling orders, delivery and subscriptions for us. You can browse without providing your name or email, although technical information may still be processed. Without the details needed for a purchase, sample or reply, we may be unable to fulfil that request.

We do not ask for medical records or health histories to provide our books or samples. Please avoid sending sensitive health information in enquiries. If you choose to include it, it will form part of your correspondence; we handle it only as permitted by applicable law.

Contact and signup details: your email address, your name if you provide it, the sample or updates you request, and records of confirmation, marketing consent and unsubscribe preferences.
Purchase and support details: products ordered, payment status, order references, billing or tax information supplied at checkout, download or delivery records, and correspondence about purchases, refunds or other enquiries.
Technical information: our hosting and service providers may process IP addresses, browser and device information, request times and security logs to deliver and protect their services.
Optional analytics: if you accept our website analytics, Google Analytics 4 processes visit and interaction information such as pages viewed, approximate location, device and browser type, referral source, identifiers and visit duration. We receive reports about website use.
Email activity: MailerLite processes delivery, bounce and unsubscribe information and may record opens and link clicks where tracking is enabled. Email tracking is separate from the website’s Google Analytics choice.

3. How and why we use information

Where a law such as the EU or UK GDPR applies to our handling of your information and requires a legal basis, we rely on consent for optional marketing and website analytics; performance of a contract or steps you request before a contract for purchases; legal obligations for required records; and legitimate interests for proportionate administration, support and security, subject to your rights. We use your email to fulfil a sample request you initiate, separately from any consent to marketing. These legal bases are not a claim that every privacy law applies to every customer or activity.

To fulfil purchases, deliver digital files and requested samples, and send necessary confirmations or service messages.
To answer enquiries, handle corrections and refund requests, and resolve delivery or payment problems.
To send optional book news, releases and offers when you have agreed to receive marketing.
To understand use of our website through consent-based analytics, maintain the website and improve our content and services.
To prevent misuse or fraud, keep appropriate business records, meet legal obligations and establish or defend legal claims.

4. Requested samples and optional marketing

The free sample offered on our website is the Longevity Decoded ‘How the grades work’ chapter. Requesting it allows us to send the email confirmation and sample-delivery messages needed to fulfil your request. It does not, by itself, sign you up for promotional emails.

Marketing is a separate choice. We use MailerLite to manage website signups, email confirmation, sample delivery and optional marketing. You can request the sample without choosing releases and offers.

You can withdraw marketing consent using the unsubscribe link in a marketing email or by contacting us. Unsubscribing stops marketing; it does not cancel a purchase or prevent necessary order or support messages. We may retain limited suppression records so we respect your choice, evidence of consent and withdrawal, and transaction records needed for legal or business purposes. Unsubscribing is not the same as deleting every record.

5. Service providers and sharing

We use the following services for the roles described below. They handle information needed to provide their services and may also process information for their own purposes, such as security or legal compliance, under their privacy policies. We do not sell your personal information.

Payhip provides checkout, order management and digital delivery. It handles customer and transaction information and makes relevant order information available to us. Payhip privacy policy.
Stripe processes card payments through Payhip and handles payment and fraud-prevention information. Decoded Press does not collect or store your full card number or card security code. Stripe privacy policy.
MailerLite provides signup forms, subscriber and consent records, email confirmation, sample delivery and marketing email delivery. MailerLite privacy policy.
GoDaddy provides our business email service. Contacting us by email involves processing your address, message contents and attachments through that service and its supporting providers. GoDaddy privacy policy.
Google provides Google Analytics 4 for website measurement when you accept analytics. Google privacy policy.
OpenAI Sites hosts our website, using Cloudflare infrastructure for website delivery. Hosting infrastructure may process technical request and security information to operate the site. See the OpenAI privacy policy and Cloudflare privacy policy.
We may also share relevant information with professional advisers or authorities where reasonably necessary for business administration, legal obligations, disputes or protection against fraud, as permitted by applicable law.

6. International processing

Our providers operate internationally. Your information may be stored or processed outside Australia, including in the United States, the United Kingdom and European countries, and in other locations used by providers and their subprocessors. Locations depend on the service and may change; we cannot promise that all information remains in Australia.

Overseas privacy laws may differ from those in your country. Where applicable law requires protections for an international transfer, we must meet those requirements. This policy does not represent that a particular transfer contract, storage location or safeguard has been independently verified for every service. The provider policies linked above explain their international processing; contact us if you need further details about our use of a provider.

7. Cookies, local storage and Google Analytics 4

Our public website loads its Google Analytics 4 script only after you accept analytics. Advertising storage, advertising user data and advertising personalisation remain denied in that consent configuration. Accepting analytics does not opt you into marketing emails.

The website saves your analytics choice in your browser’s local storage. You can decline analytics and still browse and buy. Use ‘Cookie settings’ on the public website to change your choice. Clearing browser storage or using another browser or device may require you to choose again.

If you withdraw a previous acceptance, the site updates Google’s consent setting and removes the Google Analytics cookies it can access. The Google script is not loaded on subsequent full page loads while your saved choice is declined. A script already loaded may continue to make limited requests under Google’s consent behaviour until you reload or leave that page. Changing your choice does not erase information already collected.

Our analytics control applies to our website’s Google Analytics integration. It does not manage every cookie, script or tracking feature used by an embedded MailerLite form, Payhip checkout, payment provider or linked website. Embedded services may receive technical information when they load. Their own notices and controls apply; declining our analytics is not a guarantee that those services make no requests or use no cookies. Browser controls can also manage cookies, although blocking them may affect forms or checkout.

8. How long we keep information

We keep information for as long as reasonably needed for its purpose, taking account of purchases and delivery, support, consent preferences, disputes and applicable legal, tax and accounting requirements. Different records may need different retention periods.

We review information and delete or de-identify it when it is no longer reasonably required, subject to applicable obligations and backup processes. Limited suppression and consent records may remain after a marketing unsubscribe. Service providers may retain their own records under their policies or legal obligations; a request to us does not automatically delete all independently held provider records.

9. Security and data breaches

We take reasonable steps to protect personal information against loss, misuse and unauthorised access or disclosure. Payments are handled through our payment provider rather than by collecting card details ourselves. No online service or method of storage can guarantee complete security.

If we become aware of a suspected breach affecting information we handle, we will investigate and take reasonable steps to contain and address it. We will notify affected people and relevant authorities where required by applicable law, including Australia’s Notifiable Data Breaches scheme where it applies.

10. Your choices and privacy requests

You can ask to access or correct information we hold about you by emailing admin@decodedpress.com. Depending on the law that applies, you may also have rights to deletion, restriction, objection, data portability or withdrawal of consent. These rights have conditions and exceptions; they are not absolute or identical in every country.

We may ask for proportionate information to verify your identity before releasing or changing personal information. Please do not send identity documents unless requested. We will respond within the period required by applicable law and explain any lawful reason we cannot fulfil a request. Withdrawal of consent does not affect processing that was lawful before withdrawal.

Some Australian small businesses are exempt from parts of the Privacy Act 1988. This policy does not assert that every Australian Privacy Principle or overseas privacy right necessarily applies to Decoded Press. We will consider your request and meet the obligations that do apply.

11. Children

Our books, store and email services are intended for adults. We do not knowingly collect children’s personal information for marketing. If you believe a child has supplied information to us, contact us so we can review it and take appropriate action, including deletion where appropriate or required.

12. Complaints

Please send privacy concerns to admin@decodedpress.com, explaining what happened and the outcome you seek. We aim to respond within 30 days, or sooner where applicable law requires. If more time is needed, we will explain why and keep you informed.

If you are not satisfied, you may contact the Office of the Australian Information Commissioner where the matter falls within its jurisdiction, or the relevant privacy regulator in your country where applicable. Rights to complain to a regulator are subject to the relevant law.

13. Changes to this policy

We may update this policy to reflect changes to our services, practices or legal requirements. The revision date appears at the top. We will provide additional notice or seek fresh consent where required; a policy update does not, by itself, give us consent for new optional marketing or analytics uses.