Effective date: 15 March 2026 · Last updated: March 2026
Who we are
WorkflowsKit ("we", "us", "our") is a digital product sold at workflowskit.com. We sell PDF guides for freelancers. This policy explains what limited data we collect and how we handle it.
Contact: hello@workflowskit.com
What data we collect
When you make a purchase: Your email address and payment details. Payment details are processed entirely by Stripe — we never see or store your card number, expiry date, or CVV. We receive only your email address and the amount paid.
When you visit our website: If you accept cookies, we use Google Analytics 4 (GA4) to collect anonymous usage data: pages visited, scroll depth, button clicks, approximate location (country/city, not GPS), device type, browser, OS, and traffic source. If you reject cookies, no analytics data is collected.
What we do NOT collect
- We do not use Facebook Pixel or advertising network trackers
- We do not collect your precise GPS location
- We do not build advertising profiles or sell your data
- We do not use heatmaps, session recordings, or keystroke logging
- We do not collect data from X/Twitter users (we use the X API only to publish our own content)
Cookies
We use cookies only with your explicit consent (via the banner shown on first visit). You can accept or reject analytics cookies at any time. Your choice is stored in your browser's localStorage.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga, _ga_* |
Google Analytics 4 | Distinguish visitors, track sessions (analytics only). Only set if you accept cookies. | 2 years |
__stripe_mid, __stripe_sid |
Stripe | Fraud prevention during checkout. Only set when you visit a Stripe-hosted checkout page. | Session / 1 year |
wk_consent (localStorage) |
WorkflowsKit | Remember your cookie preference so the banner does not reappear. | Until you clear browser data |
Google Analytics processes data on US servers under Google's Privacy Policy: policies.google.com/privacy
You can opt out of Google Analytics by installing the GA Opt-out browser add-on or by clicking "Reject" on our cookie banner.
How we use your data
- Email (purchase): To deliver your product by email as a PDF attachment and to send your purchase confirmation. We do not use your purchase email for marketing without your separate consent.
- Analytics data: To understand which pages and traffic sources perform well and to improve the product and website. This data is anonymous and aggregated.
Third parties we share data with
We only share data with third parties strictly necessary to operate the service:
- Stripe — payment processing. PCI-DSS compliant. Receives your email address and payment details at checkout. Stripe Privacy Policy
- Resend — transactional email delivery. Receives your email address in order to deliver your purchased PDF(s). Resend Privacy Policy
- Google Analytics 4 — anonymous usage data only (pages viewed, events, approximate location, device). Only used if you accept cookies. Google Privacy Policy
We do not sell your data. We do not share your data with advertisers. We do not share your data with any other third parties.
Data retention
- Analytics data: 26 months (Google Analytics 4 default retention setting).
- Purchase records (email address and amount): Retained indefinitely for legal, accounting, and customer support purposes. Legal requirement in most jurisdictions is 7 years.
- Product delivery: PDFs are delivered as email attachments by Resend at time of purchase. We do not host time-limited download links.
Your rights under GDPR (EU / UK residents)
If you are located in the European Union or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure ("right to be forgotten"): Request deletion of your personal data, except where we have a legal obligation to retain it (e.g. purchase records for accounting).
- Right to data portability: Receive your personal data in a structured, machine-readable format.
- Right to restrict processing: Ask us to stop using your data in certain ways.
- Right to object: Object to processing of your data for direct marketing purposes at any time.
- Right to withdraw consent: Where processing is based on consent (e.g. analytics cookies), you can withdraw at any time without affecting prior processing.
To exercise any of these rights, email hello@workflowskit.com. We will respond within 30 days.
Your rights under CCPA (California residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you additional rights:
- Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
- Right to delete: Request deletion of your personal information (subject to certain exceptions).
- Right to opt-out of sale: We do not sell personal information to third parties. This right is therefore not applicable, but we confirm our practice for transparency.
- Right to non-discrimination: We will not discriminate against you for exercising any of these rights.
To submit a CCPA request, email hello@workflowskit.com with the subject "CCPA Request". We will respond within 45 days.
Legal basis for processing (GDPR)
- Contract performance: Processing purchase data and delivering the product.
- Legitimate interests: Fraud prevention, security.
- Consent: Analytics cookies (only loaded after you accept).
- Legal obligation: Retaining purchase records for accounting.
International transfers
Your data may be processed in the United States (Stripe, Resend, Google). These transfers are made using appropriate safeguards including Standard Contractual Clauses (SCCs) as required by GDPR.
Children
This website is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us at hello@workflowskit.com.
Changes to this policy
We will update the date at the top of this page when we make significant changes. Continued use of the site after changes constitutes acceptance of the updated policy.
Contact & complaints
For any privacy questions or data requests: hello@workflowskit.com. We aim to respond within 30 days.
If you are in the EU and believe your data rights have been violated, you have the right to lodge a complaint with your local supervisory authority (in the UK: the ICO at ico.org.uk).