This policy explains what Workbench Press collects, why, who else handles it, how long it is kept, and how to have it removed. It is written to be read rather than skimmed past, and it is short because very little is collected.
Who is responsible
Workbench Press is a sole proprietorship operated by Devan Dhir in Vancouver, British Columbia, Canada. Workbench Press is the data controller for the information described here.
Contact: hello@workbenchpress.com. A postal address is available on request for anyone exercising a legal right who needs one in writing.
What is collected, and why
| Information | Why it exists | Where it comes from |
|---|---|---|
| Email address | To send your download link, and to answer you if you write in | You, at checkout or by email |
| Name | To address the receipt, and to find your order if you lose the link | You, at checkout |
| Billing country | Sales tax is determined by where you are | Stripe, at checkout |
| Amount, currency, date, order reference | Business records, required for tax | Stripe |
| Card details | Never collected or seen by us. Stripe handles these directly and we receive only the last four digits and the outcome | — |
| Server logs — IP address, browser, page requested | Kept briefly by our host to serve the site and block abuse | Automatic |
What is not collected
- No analytics, no page-view tracking, no session recording.
- No advertising or third-party marketing cookies. The site sets no cookies of its own.
- No mailing list. Buying does not sign you up to anything, and there is no marketing email to unsubscribe from.
- Nothing about how you use the books after you download them. What you build with them is not visible to us in any way.
The only external resource this site loads is a web font from Google Fonts, which means Google's servers see the request. If that matters to you, a browser extension that blocks it will not affect how the site works.
Who else handles your information
Three services are involved in selling and delivering a digital file. Each is used only for that purpose.
Stripe
Stripe processes the payment and is the merchant of record for the transaction, which means Stripe is the seller for tax purposes, issues the receipt and invoice, and handles payment disputes. Stripe collects your payment details directly; we never receive them. Stripe operates internationally and is governed by its own privacy policy at stripe.com/privacy.
Resend
Resend sends the email containing your download link. It receives your email address and the contents of that message, and nothing else.
Cloudflare
Cloudflare hosts this site and the download system, and stores the order record described above. Cloudflare also sees the ordinary technical information any web host sees.
Where your information is held
Workbench Press operates from Canada. Stripe, Resend and Cloudflare are United States companies operating globally, so your information is processed outside Canada and may be accessible to authorities in those jurisdictions under their laws. If you are in the EU or UK, these providers rely on standard contractual clauses and equivalent mechanisms for that transfer.
Why we are allowed to hold it
For readers in the EU and UK, where a legal basis must be stated: your name and email are processed to perform the contract you entered into when you bought the bundle. Order records are kept to comply with a legal obligation, namely tax and business record-keeping. Server logs rest on legitimate interest in keeping the site available and secure.
How long it is kept
- Order records — six years from the end of the tax year they fall in, which is what Canadian record-keeping requires. Deletion requests are honoured for everything not legally required to be kept.
- Email correspondence — until it has served its purpose, then deleted.
- Server logs — kept briefly by our host and then discarded. We do not retain copies.
Your rights
Whoever and wherever you are, you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete what we hold, except records tax law requires us to keep;
- stop using it in a particular way, or object to a particular use.
Email hello@workbenchpress.com. We reply within two business days and do not charge for this. We may ask you to confirm the email address the purchase was made from, so that we do not hand your order details to somebody else.
Canadian residents may complain to the Office of the Privacy Commissioner of Canada. Readers in the EU or UK may complain to their national data protection authority. We would rather you raised it with us first, but that is your choice and not a condition.
Security, stated plainly
Download links are cryptographically signed and expire. Payment details never reach our systems at all. Order records are held in access-controlled infrastructure. That said, no system is beyond compromise, and anyone claiming otherwise is overselling. If a breach affected your information we would tell you, and tell the relevant regulator where required.
Children
These are business publications and are not directed at children. We do not knowingly collect information from anyone under 16. If you believe we have, tell us and it will be deleted.
Changes
If this policy changes materially, the version number and date at the top change with it, and anyone with an active purchase is told by email. Quietly editing a privacy policy and hoping nobody notices is not a practice we intend to adopt.