Privacy Notice

Last updated: 2026

1. Who we are

The Cut, operator of fatisbad.com, is the data controller for personal data collected through this site. Contact: info@fatisbad.com.

2. What we collect and why

• Email address — to deliver your purchased ebook download link and order confirmation. Legal basis: contract performance.
• Order data — transaction ID, product, amount, timestamp. Legal basis: contract performance and legal obligation (record keeping).
• Technical data — IP address, browser, device, pages visited. Legal basis: legitimate interest (security, fraud prevention, basic analytics). Limited retention.
• Support messages — if you email us, we keep the message to respond and improve service. Legal basis: legitimate interest.

We do not collect or store your payment card details. Payment is processed by Paddle (see below).

3. Who we share data with

• Paddle.com Market Limited — our Merchant of Record. Processes the sale, billing, sales tax compliance, and refunds. Receives the data Paddle requires to complete and tax the sale (email, billing details, IP, device). See Paddle's privacy notice.
• Resend — sends transactional emails (order confirmation with download link).
• Hosting and infrastructure providers — to operate the site and store the ebook download record.
• Authorities — where required by law.

4. Cookies and analytics

We use a small number of essential cookies to operate the site and the checkout. We may use privacy-respecting analytics (e.g. Google Analytics 4 / Meta Pixel) to understand traffic. These can be disabled at the browser level.

5. Retention

We keep order records for as long as required by tax and accounting law (typically 6–10 years depending on jurisdiction). Email and analytics data is kept only as long as necessary, then deleted or anonymized.

6. Your rights

Depending on where you live (e.g. EEA/UK GDPR, California CCPA/CPRA), you may have the right to: access, correct, delete, restrict, port, or object to processing of your personal data, and to withdraw consent. EEA/UK users can also lodge a complaint with their supervisory authority. To exercise any right, email info@fatisbad.com — we'll respond within 30 days.

7. International transfers

Some of our processors operate outside your country (including the United States). Where personal data is transferred from the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Security

We use industry-standard technical and organisational measures (TLS encryption, access control, signed download URLs that expire). No system is 100% secure.

9. Children

This site is not directed at children under 18. Do not buy if you are under 18.

10. Changes

We may update this notice. Material changes will be posted here.