Privacy Policy
Last updated: 19 August 2026
This explains what I collect, why, and what I do with it. I've kept it short because it's a short list.
The person responsible for this data (the "data controller") is Toby. Contact: toby@getwayback.co.
What I collect
If you buy the book, Polar collects your name, email, billing address and payment details in order to take the payment. I never see your card details. Polar passes me your name and email so I can send you the book.
If you fill in the questions after buying, the form on the confirmation page is optional. If you complete it, I collect:
- your first and last name
- your email address
- your phone number, only if you choose to give it
- your answers about what you're going through and how long it's been
- anything you type in the free-text boxes
- which country you're browsing from, and the transaction ID of your purchase
Some of what people write in that form is personal and difficult. I want to be straightforward about it: those answers are read by me and nobody else. They are not published, not shared, not sold, and not used in videos in any way that could identify you.
If I ever quote something anonymously to make a point, it will be reworded so that even the person who wrote it wouldn't be identifiable, and you can tell me not to, at any time, by emailing me.
Why I collect it
- To deliver the book and provide support if something goes wrong. That's necessary to fulfil our contract.
- To decide what to write and make next. That's the real reason the questions exist. Knowing what people are actually struggling with is what shapes the next book and the videos. This is done on the basis of legitimate interest, and it's optional, you can buy the book and never fill it in.
- To meet legal and tax obligations connected to the sale.
Who else touches it
As few companies as I could manage:
- Polar, handles the sale as merchant of record. See their privacy notice.
- Supabase, stores the form answers in a private database.
- Vercel, hosts the website.
- Resend, sends the email containing your book.
That's the complete list. I do not sell your data, share it with advertisers, or hand it to anyone else.
How long I keep it
Purchase records are kept for 7 years, because tax law requires it. Form answers are kept until you ask me to delete them. Visit records are kept for 12 months and then deleted, because after a year they tell me nothing useful.
Your rights
You can ask me to:
- show you everything I hold about you
- correct anything that's wrong
- delete it
- send you a copy in a portable format
- stop using it for anything other than the sale
Email toby@getwayback.co and I'll do it within 30 days. You don't have to give a reason, and asking will never affect your guarantee.
If you're in the UK or EU and you think I've handled your data badly, you can complain to your national data protection authority. I'd rather you told me first so I can fix it.
Children
This is not intended for anyone under 18 and I don't knowingly collect data from children. If you believe a child has given me information, email me and I'll delete it.
Changes
If this policy changes I'll update the date at the top. If the change is significant and I have your email, I'll tell you.
Contact
toby@getwayback.co. A real person reads it.