Legal

Privacy Notice

Last updated: August 3, 2026

The Last Living Shepherdess ("we", "us") operates this website and is the data controller for the personal data described here. You can contact us about privacy at thelastlivingshepherdess@gmail.com.

What we collect and why

  • Account details (name or display name, email address, login identifiers, profile photo if you sign in with Google) — to create and secure your account and give you access to what you have purchased. Legal basis: performance of our contract with you.
  • Purchase and entitlement records (what you bought, order status, membership period) — to deliver your downloads and member access and keep our records. Legal basis: contract and legal obligation.
  • Email subscription data (email address, sign-up source, confirmation and unsubscribe status) — to send the newsletter and new post announcements you asked for. Legal basis: consent, which you can withdraw at any time.
  • Messages you send us (contact form name, email, message) — to answer you. Legal basis: legitimate interest in responding to enquiries.
  • Technical and usage data (IP address, device and browser information, basic logs) — for security, fraud prevention, and keeping the site working. Legal basis: legitimate interests.

Payment card details are collected and processed by Paddle, not by us — we never see or store your full card number.

Who we share data with

  • Paddle, our Merchant of Record, for the sale of our products, subscription management, payments, invoicing, and tax compliance.
  • Service providers (subprocessors) that host the site and database, provide authentication, and deliver email on our behalf.
  • Professional advisers such as accountants or lawyers where reasonably necessary.
  • Authorities where we are required to do so by law.

We do not sell your personal data.

International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

How long we keep it

Account and purchase records are kept for as long as your account is active and afterwards only as long as needed for legal, tax, and accounting purposes. Newsletter data is kept until you unsubscribe. Contact messages are kept only as long as needed to resolve your enquiry. After that, data is deleted or anonymised.

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent at any time. Email us and we will respond within one month. If you are in the UK or EEA, you also have the right to complain to your local data protection supervisory authority.

Security

We use appropriate technical and organisational measures — encryption in transit, access controls, and private storage for purchased files — to protect your data. No system is perfectly secure, but we take this seriously.

Cookies

We use strictly necessary cookies and similar storage to keep you signed in and to make checkout work. We do not use advertising cookies. You can clear or block cookies in your browser settings, though signing in and purchasing may stop working if you do.

Changes

We will update this notice when our practices change and revise the date at the top of the page.