Privacy Policy

Last updated: November 12, 2026

Summary

Here are the main points in a few lines. Each one is explained fully in the numbered sections that follow.

• Who we are: SDC Digital Group LLC, a Wyoming (United States) limited liability company, decides how your personal data is used and is responsible for it. For anything about your privacy, email contact@sdcdigitalgroup.com and put "Privacy request" in the subject line.
• What we collect: your contact and order details, records showing that you accepted our Terms and that your access was provided and used, technical information (for example your IP address, device and browser details, timestamps and logs), data about how you use our products, the messages you send us and, on our product pages, data from cookies, pixels and similar technologies (where the law calls for consent, only once you have accepted them).
• Why we use it: to sell our products and give you access to them, to handle billing, subscriptions, cancellations, refunds and withdrawals, to reply to you, to stop fraud, to meet our legal duties and to deal with complaints, payment disputes and chargebacks. Where the law calls for your consent, we also rely on it for marketing emails, for measuring our advertising and for showing our ads to suitable audiences.
• Who gets it: our payment processor (which also uses some of the data as a controller in its own right, for instance to prevent fraud), banks and card networks, service providers working for us, and advertising platforms (where consent is required, only after you accept their technologies). When a payment is disputed, we pass evidence through our payment processor to the acquiring bank, the card network and your card issuer.
• How long we keep it: tax records for 10 years; proof of your purchase, of your access and of how you used it for as long as we have a relationship with you plus 5 years after it ends (longer while a dispute or claim is open); everything else for the periods given in How long we keep personal data.
• Your rights: depending on where you live, you can see your data, have it corrected or deleted, limit how it is used, receive a copy, object, withdraw your consent and complain to a data protection authority.

1. Who we are and how to reach us

SDC Digital Group LLC (“SDC Digital Group”, “we”, “us”, “our”) is a limited liability company formed under the laws of the State of Wyoming, United States. We are the controller of the personal data covered by this Policy, which means we decide why and how it is used.

Our principal office, where we run the business and receive mail, is at 8200 NW 41st Street, 2nd Floor, Doral, FL 33166, United States.

Questions and requests about privacy go to contact@sdcdigitalgroup.com, with "Privacy request" as the subject. Anything to do with an order, your access, billing, cancellation, a refund or a withdrawal goes to support@sdcdigitalgroup.com.

We have not appointed a data protection officer. The email address above is where privacy questions are answered.

This Policy covers you whenever you visit our website and product pages, buy a product, use our web apps and member areas, receive our emails or get in touch with us (together, the “Services”).

The Policy describes how we collect and use personal data; it is not a request for your consent. Where consent is needed, for example for optional cookies or marketing emails, we ask for it on its own.

Our payment processor also uses part of the personal data as a controller in its own right. More on this under Payments and fraud prevention.

2. Personal data we collect

The data we collect falls into the groups below. Some groups apply only if you do the thing described.

• Identity and contact data: your name, your email address and any other contact details you choose to give us.
• Purchase and billing data: what you buy and on which plan, the prices, currency, taxes and dates, your billing country and any billing address details the payment page asks for, the type of payment method, the card brand and the last four digits and expiry date of the card, the payment status and transaction references.
• Unfinished purchases: if you begin a purchase and leave before completing it, our payment processor sends us a record of that unfinished checkout, which may include the email address you typed.
• Card details: you type your full card number and security code on our payment processor’s page, and we do not keep them on our own systems.
• Account and product data: your sign-in details, the settings and preferences you pick inside a product, your progress (such as saved items and completed steps) and anything you create in the product.
• Evidence of acceptance and delivery: which version of our Terms and policies you accepted, the wording shown and the boxes you ticked before paying, the date, time, IP address and browser used when you accepted, the page and language involved, any messages we sent about your access, and our own server records of each time your access was used and each sign-in to the product (date, time, IP address and browser).
• Technical data: your IP address, the approximate location derived from it, browser type and version, operating system, type of device, language, time zone, the page that referred you and the date and time of every request, all recorded in access and activity logs.
• Usage data: the pages and screens you look at, the features and content you use, how long your sessions last and what you do inside our products.
• Marketing and attribution data: the campaign parameters in the link you followed (such as UTM tags), advertising click identifiers, cookie and pixel identifiers, and the ad that brought you to us. On pages where the law requires consent, we gather this only with your consent.
• Email data: whether our emails were sent and delivered and, where you agreed to it and the law requires consent, whether you opened them or clicked a link in them.
• Consent and preference records: what you chose about cookies and marketing emails, with the date, time, source and version of the wording shown, any later withdrawal of consent, and the language you select on our website.
• Request data: the content of your cancellation, withdrawal, refund and privacy requests, and how and when you sent them (see Cancellation, withdrawal and other requests).
• Support data: what your messages say, what we answered and the date of each contact.
• Data collected by our payment processor: device, browser and activity details used to prevent fraud and to authenticate payments (see Payments and fraud prevention).

3. Where the data comes from

We receive personal data from these sources:

• You: when you buy a product, use it, complete a form or write to us.
• Your device and browser: technical and usage data that is recorded automatically while you use our website and products.
• Our payment processor: what you enter on the payment page (for example your name, email address and billing country or address), the payment status, transaction references, the card brand and the last four digits and expiry date of your card, records of unfinished checkouts and, when a payment is disputed, details of the dispute that the processor gets from banks and card networks.
• Our email delivery provider: whether our emails arrived or bounced, unsubscribe requests and, where you agreed to it and the law requires consent, whether you opened our emails or clicked their links.
• Advertising platforms: only where consent is required and you have accepted their technologies, details about the ad that brought you to us (for example a click identifier) and statistical reports on how our ads performed.

4. What we use personal data for, and on what legal basis

The table sets out each reason we use personal data and the legal basis behind it under the EU General Data Protection Regulation (GDPR).

If you would like more information about our legitimate interests, you can ask us.

5. Payments and fraud prevention

Payments are handled for us by third-party payment processors, named on the secure payment page. SDC Digital Group LLC is the seller and remains responsible for your order, for giving you access, for customer support and for refunds.

You type your payment details straight into our payment processor’s secure page. We pass transaction and customer details to the processor (for example your name, email address, billing country, the amount and your IP address), and it combines them with what it collects itself.

The processor records transaction data and information about the devices that connect to its services, such as the IP address, device and browser characteristics and signs of activity (for example mouse movements, time spent on the page and whether card details were typed or pasted). It gathers this, partly through cookies and similar technologies on the payment page, to detect fraud, to authenticate payments and for analytics about how its services perform.

It uses this information to supply its services to us, to run and improve them, to detect and prevent fraud, to authenticate payments and to meet its own legal duties, among them anti-money-laundering, sanctions and identity checks. Fraud signals are pooled across the businesses it serves, including information on how we deal with payments it has flagged as possibly fraudulent, such as refunds or blocks.

For these purposes the payment processor is an independent controller and follows its own privacy notice. That notice is linked from the processor’s payment page, and we can also send it to you if you ask.

When your card issuer authenticates a payment (for instance through 3-D Secure), basic device and transaction details are passed to the issuer for that purpose.

If a payment goes through a partner payment gateway that works via our payment processor, the gateway receives what it needs to process that payment.

Subscriptions and saved payment methods. For a subscription, our payment processor holds your payment method so that renewals can be charged, since that is necessary to carry out the subscription, and we keep a record of your authorisation of renewal charges. If you choose, outside a subscription, to save your payment method for quicker purchases later, our payment processor stores it. You can take that choice back at any time by writing to support@sdcdigitalgroup.com, and the saved method is then removed.

Express checkout. If you choose to save your payment details with an express checkout service offered on the payment page, that service is run by our payment processor under its own terms and privacy notice, and it sets cookies on the payment page so it can recognise you next time. We use the personal data we get through that service only for your transaction and what goes with it, such as refunds, disputes and chargebacks, unless you agree to something more.

6. Payment disputes and chargebacks

When a payment is disputed, reversed or reported as unauthorised, we answer using the information described in this Policy. That includes the records of your order, of your acceptance of our Terms and policies, of how your access was provided and of your access to and use of the product (for example IP addresses, device and browser details, timestamps, access and activity logs and support messages), and we send it through our payment processor to the acquiring bank, the card network and your card issuer.

It can also include details of your earlier purchases from us that were never disputed (such as IP address, device and browser details and email address), together with order details that we share with card-network dispute-resolution services before or during a dispute.

As proof that access was provided, we rely on the records showing when any messages about your access were sent and delivered, and on our own server records of every use of your access and every sign-in. We do not use email-open tracking for this.

Our payment processor, the card networks, card issuers and acquiring banks share information with us and with one another so that payments can be authorised and refunds, disputes and chargebacks handled.

Our basis for this is our legitimate interest in preventing fraud and in establishing, exercising and defending legal claims. If you ask us to delete your personal data, we can still keep what is needed for this purpose until the relevant dispute and limitation periods have run out (see Deletion requests and evidence and How long we keep personal data).

Our Terms of Service explain how to raise a billing question or a payment dispute.

7. Automated fraud screening

Each time you place an order, our payment processor and the risk rules we set up (for example rules about countries or repeated payment attempts) automatically judge how risky the transaction looks. They draw on details such as the payment information, billing country, IP address, device and browser characteristics and the way the payment form is filled in.

Because of this, a payment may be blocked automatically, held back for review or sent to your card issuer for extra authentication.

We never put you on a block list, end your access or refuse to deal with you in future on the strength of an automated risk assessment alone. A member of our team reviews any such decision.

If you think a payment or an access decision was mistaken, write to support@sdcdigitalgroup.com. Someone on our team will look at it, and you are free to give your side and challenge the decision.

The results of our payment processor’s fraud checks are used only to process payments and prevent fraud, and never for marketing.

8. Cookies and similar technologies

A cookie is a small file that a website stores in your browser. Similar technologies include local storage in your browser, pixels (tiny pieces of code or images that send information to a provider) and links that carry identifiers.

Our institutional pages

Our institutional pages (the home page, the product overview, the support and contact pages, our policies, the legal notice, the accessibility statement, the order confirmation page shown after payment, and the cancellation and withdrawal pages) use no cookies, no advertising pixels and no analytics tools, and they load no fonts or scripts from third-party servers.

They do write two entries to your browser’s local storage, and only when you pick a language or close the language suggestion bar:

These entries are never used for analytics or advertising. To suggest a language version, our pages look at your browser’s language setting inside your browser, and that check stores nothing.

Product pages, web apps and member areas

On product pages we use cookies, pixels and similar technologies that are not strictly necessary (such as advertising pixels, analytics tools, video players that measure viewing, or scripts that save campaign parameters) only with your consent where the law requires it. A consent tool on those pages asks you; there you can accept or refuse these technologies and change your mind whenever you like. Where consent is required, they are not loaded until you have chosen.

Where a product page carries a payment button or form from our payment processor, the processor sets cookies on that page that are strictly necessary to secure payments and prevent fraud.

Our web apps and member areas use cookies or local storage that are strictly necessary for signing you in, keeping your session going and protecting your account. Anything else used there is used only with your consent where the law requires it.

The payment page

Our payment processor runs the payment page on its own domain. It uses the processor’s own cookies and similar technologies, among other things for fraud detection, authentication, analytics about how its services perform and recognising returning users of its express checkout, as the processor’s privacy notice, linked on that page, describes.

Your browser settings

You can remove cookies and local storage whenever you wish in your browser settings. If you remove the language entries, our pages will suggest a language version again.

9. Advertising and measurement

We promote our products on third-party advertising platforms, such as social networks and search engines. Our institutional pages use no advertising technologies.

On product pages, the pixels of advertising platforms pick up information about your visit (for example the pages you view, the ad you clicked, your IP address, browser information and cookie identifiers) and send it to the platform. Where the law requires consent, that happens only after you accept advertising technologies in the consent tool. We use the information to measure how our ads perform and to show them to suitable audiences.

We also send details of purchases from our servers to advertising platforms: the purchase event, its value and currency, your email address in coded (hashed) form, your IP address, browser information and the advertising identifiers saved in your browser. The same goes for using customer email addresses, in coded form, to build or exclude advertising audiences. Where the law requires consent, we do this only with your consent, and if you paid through the express checkout service on the payment page, only if you agreed to it.

Data sent to advertising platforms never includes information about your health or anything from which your health could be inferred, and we never pass them the results of our payment processor’s fraud checks.

When data is collected through their pixels on our pages and sent to them, we and the advertising platform are joint controllers. We are responsible for informing you and for getting any consent that is required; the platform is responsible for what it does with the data once received, under its own privacy notice. You may exercise your rights with either of us, and you can ask us for the essence of these arrangements.

You can withdraw your consent at any time through the consent tool on the page where you gave it, or by writing to contact@sdcdigitalgroup.com. Withdrawing it does not change the lawfulness of what was done before.

10. Marketing emails

We may send marketing emails in the following situations:

• If you are not a customer: we may send you marketing emails only when you have agreed to get them, for example by ticking a box that was not ticked in advance.
• If you are a customer: we may send you marketing emails, including ones about our own products similar to the one you bought, only if you ticked the optional box for them before paying. You can unsubscribe whenever you like, at no cost.

Each marketing email names SDC Digital Group LLC as the sender, shows our postal address and includes a free unsubscribe link. We deal with unsubscribe requests promptly and always within 10 business days.

If you unsubscribe or object, your email address goes on a suppression list so that we do not send you marketing emails again.

Where the law requires consent, we track whether you open our marketing emails or click their links only if you agreed to it. You can take that agreement back at any time without unsubscribing, either through the link at the bottom of each marketing email that switches this tracking off or by writing to contact@sdcdigitalgroup.com. Withdrawing also covers emails already sent. Where the law requires consent for it, our service emails do not track opens or clicks.

We keep a record of each consent and each withdrawal of consent, with the date and time, the place where it was given (for example a form or the consent tool), the version of the wording shown and, for forms, the IP address.

Service emails about your purchase or your contract are not marketing, and we may send them whatever you have chosen about marketing.

11. Cancellation, withdrawal and other requests

If you use our online cancellation function (“Cancel contracts here”) or our online withdrawal function (“Withdraw from contract here”), we receive what you enter: your name, email address, the product or subscription involved, an order reference if you give one, the dates and options you pick and any comments.

We also note the date and time of your request, the language of the page, and the IP address and browser details of the device you sent it from, and we assign your request a reference number.

This data lets us carry out your request and keep a record of it, and we may use your email address to reply to you. Our legal bases are our legal obligations under consumer law and the performance of your contract.

To guard the forms against abuse, we hold a coded (hashed) version of the IP address for up to one hour so that repeated submissions can be limited. The legal basis is our legitimate interest in keeping our forms secure.

If the page opens your email app instead, your request reaches us as an email and we handle it in the same way, just as we do cancellation and withdrawal requests that arrive by email or post.

Each request and its confirmation are stored together with the evidence of your purchase for the period given in How long we keep personal data, because they may be needed in a payment dispute or legal claim.

12. Who we share personal data with

We share personal data with the kinds of recipients below, and only as far as the purposes in this Policy require:

• Payment processors and payment service providers (payment and financial services), including any partner payment gateway that handles payments through our payment processor, in order to process payments, refunds and subscriptions and to prevent fraud. For some purposes they are independent controllers (see Payments and fraud prevention).
• Banks and card networks, including your card issuer, the acquiring bank and dispute-resolution services run by or for the card networks, in order to authorise payments and to handle refunds, disputes and chargebacks (this includes, before or during a dispute, the order details described in Payment disputes and chargebacks). In a dispute they receive our evidence through our payment processor.
• Service providers working on our behalf: website hosting, hosting for our web apps and member areas, email delivery, customer support tools and data storage. They handle personal data only on our instructions.
• Advertising, analytics and attribution providers: only after you accept them where the law requires consent. For data collected through their pixels, they are joint controllers with us (see Advertising and measurement).
• Professional advisers, such as lawyers, accountants and auditors, where we need advice, audits or help with legal claims.
• Public authorities and courts, including tax authorities, where the law demands it or where it is needed to establish, exercise or defend legal claims.
• A successor business, if all or part of our business is merged, sold or transferred.

If you would like the names of the specific recipients of your data, you can ask us.

13. International processing

SDC Digital Group LLC is formed in the United States, so we process personal data there. We also transfer personal data to service providers in the United States and in other countries.

When personal data protected by EU or Swiss data protection law is sent to a country that has no adequacy decision, we rely, as applicable, on the EU-U.S. Data Privacy Framework or the Swiss-U.S. Data Privacy Framework where the recipient is certified, on Standard Contractual Clauses, or on other appropriate safeguards that the law provides.

To receive a copy of the relevant safeguards and a list of the countries we transfer personal data to, write to contact@sdcdigitalgroup.com.

14. How long we keep personal data

We hold personal data only for as long as the purposes in this Policy call for it, as follows:

Our relationship comes to an end when your last subscription or access period finishes. If you have never bought from us, the periods are counted from your last consent choice or your last contact with us. When a retention period is over, we delete the data or make it anonymous.

15. Deletion requests and evidence

If you ask us to delete your personal data, we will delete it and stop using it for marketing. The exception is the data described below, which we are obliged to keep by law or need in order to establish, exercise or defend legal claims.

That data is the evidence of your purchase, of your acceptance of our Terms and policies, of how your access was provided and of your access to and use of the product, together with the records of your requests, kept for the periods in How long we keep personal data. We need it to meet our legal obligations and to establish, exercise or defend legal claims, including payment disputes and chargebacks.

For as long as we hold this evidence, we use it only for those purposes. When we reply to your request, we say which data we are keeping and why.

Your email address also stays on our suppression list, so that we do not send you marketing emails again.

16. How we protect personal data

You type your card details straight into an encrypted (HTTPS) payment page run by our payment processor, which holds Payment Card Industry Data Security Standard (PCI DSS) certification. Our own systems never keep your full card number or security code, and we will never ask you to email card details.

Our website and products use encrypted connections (HTTPS). We allow access to personal data only to the people and service providers who need it for their work, and we require our service providers to protect the personal data they handle for us.

Whenever our messages or products refer to your card, they show only the card brand and the last four digits.

No way of sending or storing data is completely secure. If a personal data breach is likely to put your rights at risk, we will notify you and the competent authorities as the law requires.

17. Your rights (EEA and Switzerland)

If you are in the European Economic Area or Switzerland, you have these rights:

• Access: to find out whether we process your personal data and to get a copy of it.
• Correction: to have wrong data put right and incomplete data completed.
• Deletion: to have your data deleted, subject to the exceptions set out in Deletion requests and evidence.
• Restriction: to have the use of your data limited in certain cases, for example while we check a request for correction.
• Portability: to receive the data you provided to us in a structured, commonly used, machine-readable format and, where technically possible, to have it sent to another company.
• Objection: to object at any time to direct marketing and, on grounds relating to your own situation, to processing that rests on our legitimate interests (see Marketing emails).
• Withdrawal of consent: to withdraw any consent whenever you wish, without affecting the lawfulness of what we did before you withdrew it.
• Automated decisions: not to be subject to a decision based only on automated processing that has legal or similarly significant effects on you, and to ask for human review, give your point of view and challenge such a decision (see Automated fraud screening).

People living in France may also leave us instructions about what should happen to their personal data after they die.

To use your rights, write to contact@sdcdigitalgroup.com with "Privacy request" as the subject, or write to our postal address. Using your rights costs nothing. We ask only for what we need to confirm that the request really comes from you.

We reply within one month. If a request is complex or we receive many at once, we can extend that time by two further months; we would then tell you within the first month and explain the reason.

If, at your request, we correct, delete or restrict your data, we inform the recipients we have passed it to, unless that is impossible or would take disproportionate effort. If you ask, we tell you who those recipients are.

If you wish to complain to us about how we deal with your personal data, write to contact@sdcdigitalgroup.com with "Privacy complaint" as the subject. We confirm that we have received it, answer within 48 business hours and in any case within 15 days of receipt, give you a reference number and tell you the outcome without undue delay.

You may also lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work or where the alleged infringement happened, such as the CNIL in France, the AEPD in Spain, the Garante per la protezione dei dati personali in Italy, the data protection authority of your German federal state or the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland. You do not have to contact us first.

18. Information for residents of U.S. states

This section adds information that the privacy laws of some U.S. states, such as California, call for.

• Categories of data and recipients: the categories of personal data we collect are listed in Personal data we collect, and the categories of third parties we share it with are in Who we share personal data with.
• Reviewing and correcting your data: to ask for access to, correction of or deletion of your personal data, write to contact@sdcdigitalgroup.com with "Privacy request" as the subject.
• Do Not Track: our institutional pages do not follow you across other websites. We do not respond to Do Not Track signals from browsers, as there is no common standard for them. On product pages that use advertising technologies, you make your choices in the consent tool shown there.
• Tracking by third parties: on our product pages that use advertising or analytics technologies, the providers of those technologies may collect information about your online activity over time and across different websites. Where the law requires consent, this happens only after you accept those technologies in the consent tool.
• Changes and effective date: Changes to this Policy explains how we tell you about changes. The Policy takes effect on the "Last updated" date at the top of this page.

19. Other regions

If you live outside the European Economic Area, Switzerland and the United States, for example in Latin America, local law may give you similar rights, such as the right to know whether we process your personal data, to access, correct and delete it, to object, to portability, to withdraw consent and to learn who we share it with.

You can use these rights through the same contact details, and you may also contact your local data protection authority.

20. Do you have to give us personal data?

To buy a product you must give us your email address and payment details, because we need them to form and carry out the contract and to produce the records the law requires. Without them we cannot sell you the product or give you access.

To handle a cancellation or withdrawal made through our online forms, we need your name, your email address and the product concerned. The other fields are optional.

What you tell us to personalise a product is optional; if you leave it out, the product uses default settings. Marketing emails and optional cookies are always optional.

21. Children

Our Services are meant for adults aged 18 or over (or the age of majority where you live, if that is higher) and are not aimed at children. We do not knowingly collect personal data from anyone under 18.

If you believe a minor has given us personal data, write to contact@sdcdigitalgroup.com and we will delete it, apart from records we must keep by law or need to process a refund or answer a payment dispute.

22. Health information

Our products offer general practical information and are not medical services. Please do not give us details about your health when you set up or use a product or when you write to us. If a particular feature ever needs such details, we will ask for your explicit consent first and use them only for that feature.

We use no advertising technologies inside our web apps and member areas, and we never send information about your health, or information from which it could be inferred, to advertising platforms or to our payment processor.

23. Links to other websites

Our Services may link to websites and services run by other companies. This Policy does not cover them, so please read their own privacy notices.

24. Changes to this Policy

Any change to this Policy is posted on this page with a new "Last updated" date. The present version applies from November 12, 2026.

If a change is material, we will tell customers before it takes effect. If we plan to use your personal data for a new purpose, we will tell you first and, where the law requires it, ask for your consent.

Earlier versions of this Policy are available if you ask.

25. Contact

If you have a question about this Policy or want to use your rights, write to us. For privacy requests, please use "Privacy request" as the subject.

SDC Digital Group LLC
8200 NW 41st Street, 2nd Floor, Doral, FL 33166, United States
Privacy requests: contact@sdcdigitalgroup.com
Orders, access, billing, cancellations, refunds and withdrawals: support@sdcdigitalgroup.com
Website: https://sdcdigitalgroup.com/