Fine print
Privacy policy
Last updated: June 4, 2026
This Privacy Policy describes how Real Talk Parenting ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit therealtalkparenting.com (the "Website") or purchase our digital products (collectively, the "Services").
Real Talk Parenting is operated by an individual sole proprietor based in Kuwait, doing business under the trade name "Real Talk Parenting." For legal contact details, see the Contact section below.
By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, do not use the Services.
Summary of key points
- We process only the personal information necessary to deliver our digital products and operate the newsletter.
- We share limited technical data with Meta for advertising measurement via the Meta Pixel. You can opt out using your browser's Global Privacy Control signal, and the pixel does not run for visitors in the EEA, UK, or Switzerland.
- Our payment processor, Lemon Squeezy, acts as Merchant of Record and handles payment data on our behalf.
- We use essential cookies and one advertising cookie (Meta Pixel), which is not set for visitors in the EEA, UK, or Switzerland or when Global Privacy Control is enabled.
- We retain personal information for up to 7 years to comply with tax, accounting, and dispute resolution requirements.
- We rely on Standard Contractual Clauses (SCCs) for international data transfers.
- Residents of the US (CCPA states), EU/UK, Switzerland, and Canada have specific rights described below.
- Contact us at [email protected] for any privacy questions or to exercise your rights.
Information we collect
Information you provide
- Identity data: name and email address (collected at checkout via Lemon Squeezy, or via newsletter signup)
- Billing data: billing address and country (collected at checkout via Lemon Squeezy, used for tax/VAT compliance)
- Communication data: any information you send to us via email or contact forms
Information collected automatically
- Device and connection data: IP address, browser type, operating system, referring URL, and approximate (city- or country-level) location, collected automatically by Cloudflare for security and bot-management purposes
- Usage data: pages visited, time on site, and basic interaction events
- Essential cookies: session and security cookies set by Cloudflare and Lemon Squeezy to enable site security and checkout
Information we do not collect
We do not collect: social security numbers, government IDs, driver's licenses, passport numbers, biometric data, sensory recordings, professional or employment history, education records, demographic characteristics, or precise geolocation (GPS coordinates).
We do not collect or process the personal information of children under 18.
Payment information
We do not collect, store, or process payment card or bank account details. All payment processing is handled by Lemon Squeezy, our Merchant of Record. See LS's privacy policy at lemonsqueezy.com/privacy.
How we use your information
We use personal information to:
- Deliver purchased digital products (PDF guides) via email
- Process payments through Lemon Squeezy
- Send newsletter emails to subscribers (only after you opt in)
- Provide customer support
- Send transactional communications (order confirmations, download links, receipts)
- Comply with legal obligations (tax, accounting, regulatory requests)
- Detect and prevent fraud, abuse, or security incidents
- Improve the Services in aggregate (without individual profiling)
We do not use your information to:
- Build behavioral profiles or inferences about you
- Send marketing communications without your consent
- Sell your personal information for money. We do share limited pixel data with Meta for advertising measurement, as described in the Advertising — Meta Pixel section below.
Legal bases for processing (EU/UK residents)
For users in the EU, UK, Iceland, Liechtenstein, Norway, or Switzerland, we process personal information on the following legal bases:
- Contract performance — to deliver the products you purchased
- Legal obligation — to comply with tax, accounting, and consumer-protection laws
- Legitimate interests — for security, fraud prevention, and service improvement, balanced against your rights
- Consent — for newsletter subscriptions and any future optional communications
How we share your information
We disclose personal information only to:
Service providers (data processors)
- Lemon Squeezy (US) — payment processing, Merchant of Record. lemonsqueezy.com/privacy
- Cloudflare, Inc. (US) — website hosting, DNS, security, and bot management. cloudflare.com/privacypolicy
- Google LLC (Google Workspace) (US) — business email infrastructure. policies.google.com/privacy
- Buttondown (US) — newsletter email delivery for subscribers who opt in. buttondown.com/privacy
Each of these providers acts as a data processor on our behalf and is bound by data processing agreements (DPAs) that include Standard Contractual Clauses (SCCs) where applicable.
Advertising — Meta Pixel
We use the Meta Pixel, provided by Meta Platforms, Inc., to measure the performance of our advertising and to later optimize ad delivery. The pixel collects limited technical data — pages viewed, IP address, and browser/device information — and shares that data with Meta in the United States.
The pixel does not load for visitors in the EEA, the UK, or Switzerland. It also does not load when your browser sends a Global Privacy Control (GPC) signal. Visitors anywhere can opt out by enabling GPC in their browser; see our Cookie Policy for the specific cookie set (_fbp) and its lifespan.
Legal and compliance disclosures
We may disclose personal information if required by law, court order, or government request, or to protect our legal rights, prevent fraud, or ensure user safety.
What we do not do
We do not sell personal information for monetary or other valuable consideration. We do not disclose your personal information to advertisers or marketing networks, except the limited technical data shared with Meta through the Meta Pixel as described above.
International data transfers
The Services are operated from Kuwait, and our service providers are primarily located in the United States. If you are located outside the US, your personal information will be transferred to, stored in, and processed in the US and other jurisdictions where our service providers operate.
For transfers from the EU/UK/Switzerland to the US, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission and the UK Information Commissioner's Office. These SCCs are incorporated into the DPAs with each of our service providers.
We do not adhere to the EU-US Data Privacy Framework.
Data retention
We retain personal information for up to 7 years after your last transaction or interaction. This retention period reflects:
- Tax and accounting record-keeping obligations (Kuwait, US, EU)
- Chargeback and payment dispute windows (up to 540 days under card scheme rules)
- Statute of limitations for contract and consumer-protection claims
Newsletter subscribers may unsubscribe at any time, after which we remove their email from active sending. Records of subscription history may be retained for compliance purposes.
After 7 years, personal information is deleted or anonymized, except where ongoing legal obligations require longer retention.
Security measures
We implement reasonable administrative, technical, and organizational measures to protect personal information, including:
- TLS/HTTPS encryption for all site traffic (via Cloudflare)
- Two-factor authentication on all administrative accounts
- PCI-DSS Level 1 compliance for payment processing (via Lemon Squeezy)
- Encrypted email communications (via Google Workspace)
- Access restricted to the Operator only
No method of transmission or storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach, we will notify affected users and relevant data protection authorities within the timeframes required by applicable law (e.g., 72 hours under GDPR/UK GDPR).
Your rights
All users
You have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete personal information
- Delete your personal information (subject to legal retention obligations)
- Object to certain processing activities
- Restrict processing in certain circumstances
- Data portability — receive a copy of your data in a structured, commonly used format
- Withdraw consent where processing is based on consent (including newsletter unsubscribe)
To exercise any of these rights, email [email protected] with the subject "Privacy Request." We will respond within 30 days (or as required by your local law).
EU/UK/Swiss residents (GDPR / UK GDPR / FADP)
In addition to the rights above, you have the right to lodge a complaint with your local data protection authority. We will not retaliate against you for exercising your rights.
California residents (CCPA / CPRA)
You have the right to:
- Know what personal information we collect, use, disclose, and sell
- Delete personal information we have collected
- Correct inaccurate personal information
- Opt out of the sale or sharing of personal information (you may opt out of sharing via the Meta Pixel using Global Privacy Control)
- Limit use of sensitive personal information (we do not collect sensitive PI as defined under CCPA)
- Non-discrimination for exercising rights
Categories of personal information collected in the last 12 months:
- Identifiers (name, email, IP address)
- California Customer Records (name, billing address, financial information processed by Lemon Squeezy)
- Internet activity (browsing data via Cloudflare)
- Internet/device activity shared with Meta via the Meta Pixel (pages viewed, IP, browser/device data)
- Geolocation (approximate, city/country level)
- Commercial information (purchase history)
In the preceding 12 months, we have shared internet/device activity with Meta for cross-context behavioral advertising via the Meta Pixel. You may opt out using Global Privacy Control.
Shine the Light Law (California Civil Code §1798.83): California residents may request information about disclosures of personal information to third parties for those third parties' direct marketing purposes. We do not make such disclosures.
Right to appeal: California residents whose privacy request is denied may appeal by emailing the same address with "Appeal" in the subject line.
Other US state residents
Residents of Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have rights substantially similar to those described above, under their respective state privacy laws. To exercise these rights, follow the same process.
Canadian residents (PIPEDA / Quebec Law 25)
You have rights to access, correct, and request deletion of your personal information, and to lodge a complaint with the Office of the Privacy Commissioner of Canada or, for Quebec residents, the Commission d'accès à l'information.
Verification
To protect your privacy, we may require you to verify your identity before responding to a request. Verification typically involves confirming the email address used at purchase or newsletter signup.
Cookies and tracking
We use essential cookies and the Meta Pixel advertising cookie (_fbp). The Meta Pixel is not loaded for visitors in the EEA, UK, or Switzerland, or when your browser sends a Global Privacy Control signal.
- Cloudflare cookies for bot management and security
- Lemon Squeezy session cookies for checkout functionality
For full details, see our Cookie Policy.
We honor the Global Privacy Control (GPC) signal. When your browser sends GPC, the Meta Pixel does not load and no data is shared with Meta for advertising.
Data Subject Access Requests (DSARs)
To submit a Data Subject Access Request, email [email protected] with the subject "DSAR." Include:
- Your full name
- The email address used at purchase or newsletter signup
- The specific right you are exercising (access, deletion, correction, etc.)
We will respond within 30 days, or notify you if an extension is required.
Data Protection Officer
The Operator serves as the appointed Data Protection Officer (DPO). DPO email: [email protected]
Children's privacy
The Services are intended for adults aged 18 and older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, contact us immediately and we will delete it.
Contact
For any privacy-related questions, requests, or concerns:
Real Talk Parenting
Operator: Hamad Alshaya
Email: [email protected]
Country: Kuwait
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes that affect your rights, we may provide additional notice via email or a prominent notice on the Website. Continued use of the Services after an update constitutes acceptance of the revised Privacy Policy.