1. Who we are

Morrow Manuals is a digital publishing project selling downloadable guides.

Website: morrowmanuals.com
Privacy contact: morrowmanuals@gmail.com

2. Data we collect

Order and delivery data may include:

• checkout email address;
• guide purchased, amount, currency and purchase time;
• payment, delivery, download and refund status;
• private-link expiry and download count;
• encrypted or keyed identifiers used to match a Stripe event, Checkout Session, PaymentIntent, delivery and refund without displaying those identifiers in logs.

Consent evidence also includes the policy and consent versions, a cryptographic fingerprint of the exact consent statement, the date and time, product and Stripe environment, an opaque one-time reference, and a keyed fingerprint used to match the consenting email to the checkout email.

The consent record does not contain information about a child. We do not ask for photographs, completed worksheets or evidence about a child for refund requests.

Support data may include the sender’s email, message, guide name and order reference.

3. How data is collected

Data is collected when a visitor uses the website, completes the server-side consent step, continues to Stripe, completes checkout, receives or uses a private download link, requests support or asks for a refund.

Technical and security data may also be processed by the hosting provider, WordPress, Stripe, the email provider, CookieYes and consented advertising tools.

4. Why we use data

• process and validate orders;
• record legally required immediate-supply consent;
• deliver purchased guides;
• secure and limit private downloads;
• provide support and handle refunds;
• prevent duplicate delivery, fraud and abuse;
• revoke access after a confirmed full refund;
• maintain accounting, dispute and legal records;
• operate and protect the website.

Morrow Manuals does not sell customer personal data.

5. Payments

Stripe processes payments under its own privacy and security terms. Morrow Manuals does not receive or store full card numbers, security codes or complete payment credentials.

6. Email delivery

The delivery email contains one secure download link and a durable confirmation of the immediate-supply consent. No PDF is attached directly.

7. Cookies and advertising consent

CookieYes records consent preferences and blocks non-essential technologies until the relevant category is accepted. Morrow Manuals’ consent-aware Meta integration must not load advertising tracking before Advertisement consent.

Advertising consent and immediate-digital-supply consent are separate. CookieYes or a browser cookie is never treated as proof that the customer accepted immediate digital supply.

8. Sharing

Data is shared only with providers needed to host the site, process payments, send email, deliver products, manage consent, measure consented advertising activity or comply with legal obligations. Relevant providers include the hosting provider, Stripe, the email provider, CookieYes and Meta where the required Advertisement consent exists.

9. Retention

Completed order, consent, delivery and refund records may be retained for accounting, legal rights, dispute handling, fraud prevention and proof of the policy and voluntary guarantee applicable to the order.

Expired consent records that never become an order are operational records and are purged after the short retention period implemented by MMSD. Logs retain keyed identifiers rather than full Stripe Session identifiers, tokens or server paths.

Data no longer required is deleted or anonymised where appropriate.

10. Your rights

Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing of personal data. Contact morrowmanuals@gmail.com with enough information to identify the relevant order or request. Do not send full payment-card details.

11. Children

Morrow Manuals sells resources to adults. The website is not intended for children to purchase from directly, and refund requests must not include personal information about a child.

12. Security and international processing

Reasonable technical and organisational safeguards are used, including encrypted sensitive order fields, keyed identifiers, signed Stripe webhooks, expiring download tokens and private PDF storage. No online system can be guaranteed completely secure.

Some providers may process data in other countries under their own terms and applicable transfer safeguards.

13. Updates

The effective date above identifies this version. Policy changes apply prospectively unless the law requires otherwise.

Terms of Service · Refund Policy