Privacy Notice

1. Who we are

FocalPoint Design House INC. ("FocalPoint," "we," "us," or "our") operates the FocalPoint Design website and digital-product library. We act as the data controller for personal data collected through this site and the Service.

2. Personal data we collect

• Account data: name, email address, hashed password or OAuth identifier.
• Profile data: optional company name, avatar, and preferences you provide.
• Order & entitlement data: products purchased, order status, download history.
• Support data: messages you send us, including any information contained in them.
• Usage & device data: IP address, browser and device identifiers, pages viewed, referring URLs, and similar telemetry.
• AI Assistant data (Mastermind): prompts and messages you submit to the assistant.

Payment card details are collected directly by Paddle (see Section 5). We do not receive or store your full card number.

3. How we use personal data

• Create and secure your account (legal basis: performance of a contract).
• Deliver purchased guides, bundles, and Mastermind features (contract).
• Provide customer support and respond to inquiries (contract / legitimate interests).
• Detect fraud, abuse, and security incidents (legitimate interests, legal obligation).
• Improve the Service, including error monitoring and analytics (legitimate interests).
• Send transactional emails such as receipts and important account notices (contract).
• Send optional marketing updates where you have opted in (consent — you can withdraw at any time).

4. Legal bases (UK/EEA users)

Where UK/EU data-protection law applies, we rely on: performance of a contract with you, our legitimate interests (running and improving the Service, protecting it from abuse), compliance with legal obligations (tax, accounting, fraud prevention), and your consent where required (e.g. non-essential cookies, marketing emails).

5. Who we share data with

• Paddle — our Merchant of Record, which processes payments, handles subscriptions, calculates and remits sales tax/VAT, and issues invoices and refunds. Paddle's privacy practices are described in the Paddle Privacy Policy.
• Hosting & infrastructure providers (cloud hosting, database, storage, CDN) used to run the Service.
• Email & support tooling used to send transactional messages and respond to tickets.
• Analytics & error monitoring providers that help us understand usage and diagnose issues.
• AI providers that power the Mastermind assistant (prompts you submit are processed by these providers to generate responses).
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law or to protect our rights.

We do not sell your personal data.

6. International transfers

Our providers may process data outside your country, including in the United States. Where UK/EEA data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and, for UK data, the UK International Data Transfer Addendum, or on adequacy decisions where they apply.

7. Data retention

We keep account and order data for as long as your account is active and for a reasonable period afterwards to comply with tax, accounting, and legal obligations (typically up to 7 years for financial records). Support messages are kept while relevant to serving you. When personal data is no longer needed, we delete or anonymise it.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, to restrict or object to certain processing, and to withdraw consent. UK/EEA users also have the right to lodge a complaint with a supervisory authority. To exercise these rights, contact us at privacy@focalpointdesign.co. We aim to respond within one month.

9. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, row-level security on our database, and signed, time-limited download links — to protect personal data. No system is perfectly secure, and we cannot guarantee absolute security.

10. Cookies

We use essential cookies and similar technologies to keep you signed in and secure the site. We may also use limited analytics cookies to understand aggregated usage. You can control non-essential cookies through your browser or, where offered, our cookie banner.

11. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be highlighted on this page.

12. Contact

FocalPoint Design House INC. — privacy questions: privacy@focalpointdesign.co.