This Privacy Policy explains what personal information Safe Publishing LTD collects, how it is used, who it is shared with, and what rights the customer has. By accessing the Website or purchasing the Product, the customer agrees to the terms of this Privacy Policy.
Safe Publishing LTD is the publisher and seller of The High-Stakes Exam Protocol and is the data controller responsible for personal information collected through the Website and the Product. Contact for privacy matters: support@thehighstakesexamprotocol.com.
The Product is sold exclusively to customers in the United States. Purchases from other jurisdictions are not authorized and may be declined by the payment processor. The Website is directed at United States residents. This Privacy Policy is written to comply with United States federal and state privacy law, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the California Online Privacy Protection Act (CalOPPA), the CAN-SPAM Act, and the Children's Online Privacy Protection Act (COPPA). If the customer accesses the Website from outside the United States, they should not submit personal information. Safe Publishing LTD does not target the European Economic Area, the United Kingdom, or any other jurisdiction outside the United States.
Information the customer provides when purchasing: name (as entered at checkout), email address (as entered at checkout), billing address if entered at checkout, payment card information (see Section 5 on Payhip and Stripe — Safe Publishing LTD does not see or store card numbers).
Information the customer provides when contacting support: email address, content of the support message, order number if provided.
Information the customer provides when submitting a review: if the customer voluntarily submits a review via the review form linked from the Resource Hub, Safe Publishing LTD collects the customer's name, exam, score if the customer chooses to share it, and the text of the review. Submission of a review requires explicit consent to have the customer's name, exam, and words displayed publicly on the sales page.
Information collected automatically when the customer uses the Website: IP address; browser type and version, device type, operating system; pages visited on the Website and time of visit; referring website if any. This automatic information is collected by the hosting provider (Cloudflare) for security, abuse prevention, and traffic management purposes. It is retained in aggregate log form for a limited period and is not used to build individual behavioral profiles.
Safe Publishing LTD uses personal information for the following purposes: to process the purchase and deliver the Product (sending the Resource Hub access link, sending the receipt, providing customer support); to respond to the customer's requests (replying to support emails, processing refund requests under the Refund Policy); to administer Resource Hub access (associating the access link with the order record, investigating documented breach of the Terms of Service); to publish reviews the customer consented to publish (displaying name, exam, and words on the sales page, only where the customer gave explicit consent at submission); to secure and operate the Website (detecting and preventing abuse, protecting against fraudulent purchases, complying with legal obligations); and to send transactional email (order confirmation, delivery of access link, refund confirmation, material updates to the Product or these terms). Safe Publishing LTD does not send marketing email unless the customer has separately opted in.
Safe Publishing LTD does not sell personal information to third parties; does not share personal information with third parties for their own marketing; does not use personal information to build behavioral advertising profiles; and does not use tracking pixels or analytics services on this Website.
Safe Publishing LTD shares personal information only with the following categories of service provider, and only to the extent necessary for the service they perform.
Payhip Ltd (a company registered in the United Kingdom) — e-commerce checkout and delivery platform. When the customer completes checkout, Payhip collects and processes name, email address, billing information, and order details, coordinates payment via its integrated Stripe Connect sub-account, applies the digital watermark to the ebook PDF, and sends the delivery email (receipt, watermarked ebook, and Resource Hub link) on Safe Publishing LTD's behalf. Payhip's privacy policy: https://payhip.com/privacy.
Stripe, Inc. — payment processor, connected via Payhip's Stripe Connect integration. Stripe collects and processes payment card details directly during checkout. Safe Publishing LTD does not see, store, or transmit full card numbers. Stripe's privacy policy: https://stripe.com/privacy.
Cloudflare, Inc. — website host and CDN. Cloudflare processes IP addresses and request metadata for security and content delivery. Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/.
Namecheap, Inc. (Private Email service) — email service provider for support@thehighstakesexamprotocol.com. Email content and metadata pass through Namecheap servers. Namecheap's privacy policy: https://www.namecheap.com/legal/general/privacy-policy/.
Google LLC (Google Forms) — if the customer submits a review via the review form linked from the Resource Hub, responses are collected via Google Forms and stored in a Google Sheet accessible only to Safe Publishing LTD. Google's privacy policy: https://policies.google.com/privacy.
Safe Publishing LTD may disclose personal information when required by law, court order, or valid legal process, or where necessary to protect the rights, property, or safety of Safe Publishing LTD or others.
The Website uses only strictly necessary cookies and technical storage required for the site to function and be secure. Specifically: Cloudflare security cookies (such as __cf_bm), used to distinguish humans from bots and mitigate attacks, session-based; Stripe checkout cookies, set on the Stripe-hosted checkout page during a purchase transaction and required for payment security and fraud prevention.
Safe Publishing LTD does not use Google Analytics or any other analytics service; does not use Meta (Facebook) Pixel, TikTok Pixel, or any other advertising or retargeting pixel; does not use third-party marketing cookies; and does not engage in cross-site tracking of any kind.
Because Safe Publishing LTD sets only strictly necessary cookies, no cookie consent banner is displayed. If analytics or advertising technologies are added in the future, this Privacy Policy will be updated and the appropriate notice and opt-out mechanism will be provided. The customer can control or block cookies through browser settings; blocking strictly necessary cookies may prevent completing a purchase.
Purchase records (name, email, order number, order status) are retained for the duration of the customer's access to the Resource Hub, plus up to seven (7) years for tax, accounting, and legal recordkeeping under United Kingdom and United States law. Support communications are retained for up to three (3) years after the last message in the thread, then deleted or anonymized. Reviews the customer submitted with consent to publish are retained and displayed publicly until the customer requests removal (see Section 9) or until the Product is discontinued. Automatic security logs (IP addresses, request metadata) are retained by Cloudflare per its own retention schedule, typically not more than 30 days for edge logs.
Safe Publishing LTD uses commercially reasonable technical and organizational measures to protect personal information, including HTTPS/TLS encryption for all Website traffic, encryption in transit for payment data (handled by Stripe on Stripe-controlled infrastructure), and access controls on internal systems. No transmission of information over the internet is fully secure; absolute security cannot be guaranteed. If Safe Publishing LTD becomes aware of a personal-data breach affecting the customer's information, notification will be provided in accordance with applicable United States federal and state notification law.
California residents have the following rights under CCPA/CPRA with respect to personal information: (a) Right to know — request disclosure of the categories and specific pieces of personal information collected, the categories of sources, the business or commercial purpose for collecting it, and the categories of third parties with whom it is shared. (b) Right to delete — request deletion of personal information collected, subject to statutory exceptions (for example, information required to be retained for tax purposes). (c) Right to correct — request correction of inaccurate personal information. (d) Right to opt out of sale or sharing — Safe Publishing LTD does not sell personal information and does not share it for cross-context behavioral advertising; because Safe Publishing LTD does not do either, there is no opt-out to exercise; if this changes in the future, a clearly labeled "Your Privacy Choices" link will be provided. (e) Right to limit the use of sensitive personal information — Safe Publishing LTD does not use sensitive personal information (as defined by CPRA) for any purpose beyond what is strictly necessary to provide the Product. (f) Right to non-discrimination — Safe Publishing LTD will not deny the customer the Product, charge a different price, or provide a different level of quality because the customer exercised a privacy right.
How to exercise these rights: send an email to support@thehighstakesexamprotocol.com from the email address associated with the purchase, stating clearly which right the customer wishes to exercise. Safe Publishing LTD will respond within forty-five (45) days as required by CCPA/CPRA. Safe Publishing LTD may need to verify the customer's identity by matching the request against the purchase record.
Authorized agent: the customer may designate an authorized agent to make a request on their behalf. Safe Publishing LTD may require proof of authorization and verification of the customer's identity.
Some web browsers transmit a "Do Not Track" (DNT) signal. There is currently no industry standard for responding to DNT signals. Because Safe Publishing LTD does not track users across websites for behavioral advertising, DNT signals have no material effect on how information is handled.
The Website and the Product are directed to adult professionals preparing for high-stakes examinations. Safe Publishing LTD does not knowingly collect personal information from children under the age of thirteen (13). Under the Terms of Service, purchasers must be at least eighteen (18) years old or have the consent of a parent or legal guardian. If Safe Publishing LTD becomes aware that personal information has been inadvertently collected from a child under thirteen, it will be deleted promptly. Any person who believes a child under thirteen has provided personal information should contact support@thehighstakesexamprotocol.com.
Transactional email related to the customer's purchase (order confirmation, access delivery, support replies, refund confirmations, material updates to the Product or these terms) is sent as necessary to fulfill Safe Publishing LTD's contract with the customer and is not subject to opt-out under the CAN-SPAM Act. Safe Publishing LTD does not currently operate a marketing email list. If marketing email is introduced in the future, it will be opt-in only, and every marketing message will include a clear unsubscribe link and physical mailing address in accordance with CAN-SPAM.
Safe Publishing LTD is registered in England and Wales. Personal information the customer provides may be processed in the United Kingdom, by service providers in the United Kingdom (Payhip), and by service providers in the United States (Stripe, Cloudflare, Google) or in other jurisdictions where those service providers operate. By purchasing the Product, the customer consents to this transfer and processing. Because Safe Publishing LTD sells exclusively to customers in the United States, it does not process personal information under the European Union GDPR or the United Kingdom GDPR for consumer-facing services and does not offer GDPR-specific rights beyond what United States law requires. A customer located in a jurisdiction whose law applies mandatorily notwithstanding the market restriction in Section 2 should contact Safe Publishing LTD and the request will be addressed in good faith.
Safe Publishing LTD may update this Privacy Policy from time to time. The version in effect on the date of the customer's purchase or Website visit is the version that applies to that transaction, as archived by Safe Publishing LTD. Material changes will be notified via the email address on file at least fourteen (14) days before taking effect for existing customers, and posted on this page with an updated effective date.
Email: support@thehighstakesexamprotocol.com. Company: Safe Publishing LTD, a company registered in England and Wales. Response time: within 2 business days for standard requests; within 45 days for CCPA/CPRA rights requests.