Privacy Policy

This Privacy Policy explains how Digital Products Simplified (“we”, “us”, or “our”) collects, uses, stores, and shares your personal information when you visit our websites at digitalproductssimplified.com or joindps.io, purchase or use our products and services, or otherwise interact with us.

We are committed to protecting your privacy and handling your personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

For the purposes of UK data protection law, Ben Lucas, trading as Digital Products Simplified, is the data controller of your personal information. You can reach us at:

Ben Lucas, trading as Digital Products Simplified
Email: info@joindps.io

Business address:

Castle Farm Barn
North Denmead Road
Southwick
Hampshire
PO17 6EX

We collect the following categories of personal information:

Information you give us directly:

• Account and identity data, your name, email address, username, password, and any profile details you provide.
• Billing and payment data, your billing address and payment card details (processed by our payment provider; we do not store full card numbers).
• Communications data, messages you send us via email, DMs, in-app chat, or any other contact channel.
• Booking and coaching data, information you provide when booking a coaching call or filling out our intake forms, including your goals, business situation, budget, and any other details you share.
• Content you upload, any text, files, or other content you submit through our platform, including conversations you have with our AI coaches.
• Marketing preferences, your subscription status to our email list and any preferences you set.

Information we collect automatically:

• Usage data, when you sign in and when you were last active, which features you use, and your AI credit usage. We do not track which individual pages you view.
• Device and connection data, your IP address and basic browser information. Your IP address is used only to apply rate limits and to protect the service from abuse. We do not use it to work out your location.
• Cookies and similar technologies, see section 9 for details.

Information from third parties:

• Payment providers (such as Stripe), payment confirmation, last four card digits, transaction status.
• Social media platforms (such as Instagram, TikTok, YouTube), basic profile data when you choose to message us or interact with us on those platforms.

We use your personal information for the following purposes, relying on the lawful bases set out below.

Where we rely on legitimate interests, those interests are: running and growing our business, providing high-quality services, securing our platform, and understanding how customers use our products so we can improve them. We have considered the impact on you and believe these processing activities do not unduly affect your rights.

Our software platform uses artificial intelligence to deliver coaching conversations, generate content, and provide other automated outputs. To do this:

• Your conversations with our AI coaches are processed by third-party AI providers, currently Anthropic and OpenAI, operating under their respective data processing terms.
• AI providers may temporarily process the content you submit in order to generate responses. They do not, as a rule, train their underlying models on your conversations, but we recommend you avoid submitting highly sensitive personal information (financial details, health data, etc.) into AI conversations regardless.
• We may store conversation history within your account so you can refer back to it.

We do not make solely automated decisions that produce legal or similarly significant effects on you. AI outputs are informational and educational only, any decisions you make based on them are your own.

We share personal data only where necessary, and only with service providers who process it on our instructions. The providers we currently rely on are:

• Payments— Stripe, to take payments and manage subscriptions.
• Hosting and infrastructure— Vercel (website and application hosting, content delivery, bot protection) and Supabase (database, account authentication, and file storage, including any images you upload).
• AI providers— Anthropic and OpenAI, to generate responses in the AI coaching features.
• Email delivery— Resend, to send account and service emails such as sign-in links and password resets.
• Automation and CRM— Make.com and Notion, to record new sign-ups, plan changes, and support requests in our customer records.
• Email marketing— Kit (formerly ConvertKit), to send marketing and onboarding emails.
• Security and abuse prevention— Upstash, which briefly stores IP addresses to enforce rate limits.
• Scheduling— iClosed, to run the booking calendar when you book a call with us.
• Video hosting— Loom, Tella, and YouTube, to host and play course and tutorial videos.
• Community platform providers, if you join one of our communities.
• Professional advisers— our accountants and other advisers, where strictly necessary.
• Regulators and law enforcement, where required by law or to protect our rights.

We do not sell your personal information to third parties.

Most of the providers listed in section 5 are based outside the UK, principally in the United States. In particular, the database holding your account, your AI conversations, and any files you upload is hosted in the United States, and your AI conversations are processed by providers in the United States.

Where personal data leaves the UK, we take appropriate steps to protect it, such as:

• Relying on adequacy decisions issued by the UK government where they exist.
• Using the UK International Data Transfer Agreement or the EU Standard Contractual Clauses (with the UK addendum) for transfers to countries without an adequacy decision.
• Working only with providers that have appropriate technical and organisational safeguards in place.

You can request more information about the specific safeguards in place for any transfer by contacting us using the details in section 1.

We keep your personal data for as long as your account is open and we are providing the Services to you. We keep it while it is in active use, and remove it when it is no longer needed or when you ask us to.

• While your account is active, we keep your account, billing, and AI conversation data so we can provide the Services and support you.
• Billing, payment, and tax records are kept for at least 6 years, as required by UK tax law. This is a legal obligation and it overrides a deletion request for those specific records; we cannot delete them early even if you ask us to.
• Inactive or closed accounts are not deleted automatically on a fixed schedule. We review inactive and closed accounts periodically and delete or anonymise personal data that is no longer needed.
• If you ask us to delete your data, we will do so, other than the legal retention exceptions above. See section 8 for how to make a request.

We may also keep information for longer where required by law or regulation, or to establish, exercise, or defend legal claims. You can ask us to delete your personal data at any time using the contact details in section 1.

Under UK GDPR you have the following rights in relation to your personal data:

• Right of access, to ask us for a copy of the personal data we hold about you.
• Right to rectification, to ask us to correct inaccurate or incomplete data.
• Right to erasure(“right to be forgotten”), to ask us to delete your data in certain circumstances.
• Right to restrict processing, to ask us to limit how we use your data in certain circumstances.
• Right to data portability, to ask us to provide your data in a structured, machine-readable format.
• Right to object, to object to processing based on legitimate interests, including for direct marketing purposes.
• Right to withdraw consent, where we rely on your consent for something, you can withdraw it at any time. For marketing emails we rely on legitimate interests rather than consent, so the right to object above is the one that applies — and we always honour it.
• Right not to be subject to solely automated decision-making that produces legal or similarly significant effects.

To exercise any of these rights, email us at info@joindps.io. Please tell us which right you are exercising, and include enough detail for us to identify your account, such as the email address or username you use to sign in.

We may need to verify your identity before acting on a request, to protect your account from unauthorised access.

We will respond within one calendar month of receiving your request. Where a request is complex or you have made a number of requests, we may extend this by up to two further months. If an extension is needed, we will tell you within the first month and explain why.

Exercising these rights is free of charge in normal circumstances. There is currently no self-service way to delete or export your data from within the app, so requests are handled by email rather than through an in-app feature.

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would appreciate the chance to address your concerns before you approach the ICO, so please consider contacting us first.

We use strictly necessary cookies only. These are the cookies the site cannot work without:

• Keeping you signed in and keeping your session secure.
• Remembering interface preferences such as light or dark mode, whether the sidebar is collapsed, and which updates you have already seen. These are stored in your browser's local storage rather than in cookies, but we list them here because they work the same way from your point of view.

We do not use analytics cookies, advertising cookies, or tracking pixels on this website, and we do not build advertising profiles from your use of it.

Some pages include content hosted by other companies, and they behave differently depending on where they appear:

• The booking calendar on our public pages is not loaded until you ask for it. You will see a placeholder with a button, and nothing is requested from the provider until you press it.
• Course and tutorial videos inside the app do load automatically when you open a page that contains them, so the video provider may set cookies at that point. These pages are only reachable once you are signed in, and the videos are part of the service you signed up for. YouTube videos are served from youtube-nocookie.com, which limits what YouTube stores.

Where third-party content is loaded, that provider may set its own cookies and their privacy policy will apply to that content.

Because we set no non-essential cookies, we do not show a cookie consent banner. You can still block or delete cookies through your browser settings, though blocking essential cookies will stop you being able to sign in.

When you create an account, we add you to our email list and send you occasional tips, updates, and offers about our own products and services. We tell you this on the signup form itself, before you create the account.

We rely on our legitimate interestsin promoting our own similar products to our own users as the basis for this, rather than asking you to opt in. You always have the right to object to marketing, and if you do, we will stop — there is no balancing test and no exception. Objecting costs you nothing and does not affect your access to the Services.

You can unsubscribe at any time. Every marketing email we send carries an unsubscribe link, and you can also email us at info@joindps.io and ask to be removed. We act on it as soon as we receive it.

Unsubscribing from marketing does not stop necessary service and account emails, such as sign-in links, receipts, and important notices about the Services. Those are not marketing, and we send them because they are needed to provide your account.

We take the security of your personal data seriously. Measures we have in place include:

• Encryption of data in transit (HTTPS/TLS) and at rest where appropriate.
• Access controls limiting who can view or process personal data.
• Working only with reputable, security-vetted third-party providers.
• Reviewing the service for security issues, and acting on them promptly when we find them.

No method of transmission over the internet or electronic storage is 100% secure. If we discover a personal data breach affecting your rights, we will notify you and the ICO in accordance with our legal obligations.

Our Services are not intended for children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us so we can delete it.

The Site may contain links to third-party websites and platforms. We are not responsible for the privacy practices of those third parties. We recommend you read their privacy policies before sharing any personal data with them.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will reflect the most recent change. Where changes are material, we will notify you by email or through a prominent notice on the Site before the changes take effect.

For any questions about this Privacy Policy or how we handle your personal information, contact us at:

Ben Lucas, trading as Digital Products Simplified
Email: info@joindps.io

Business address:

Castle Farm Barn
North Denmead Road
Southwick
Hampshire
PO17 6EX