This Privacy Policy explains how Debra Jenkins, operating Clock That Care™ (the "Platform"), collects, uses, and protects your personal information. We act as the data controller for information collected through the Platform.
1. Information We Collect
- Account information — name, email address, password (hashed), profile details you provide.
- Membership status — plan, subscription state, renewal dates (received from our payment processor).
- Platform activity — journal entries, quiz scores, saved items, page views, feature usage.
- Payment confirmations — order IDs and receipts from Paddle. We do not receive or store your full card number.
- Communications — messages you send to support, Ask Debbie submissions, story submissions.
- Technical data — IP address, device/browser type, and cookies necessary for authentication and security.
2. How We Use Your Information
- Membership management and account access
- Customer support and communication
- Platform improvements, personalization, and security
- Sending transactional emails (password resets, billing notifications, account activity)
- Complying with legal obligations
3. Legal Bases (where GDPR applies)
We process personal data based on contract performance (delivering your membership), legitimate interests (platform improvement, security, fraud prevention), consent (where required for marketing), and legal obligations.
4. We Do Not Sell Personal Information
Clock That Care does not sell your personal information to third parties.
5. Sharing with Service Providers
We share the minimum necessary data with:
- Paddle — our Merchant of Record for processing payments, subscriptions, tax compliance, and invoicing.
- Hosting and infrastructure providers — to run and secure the Platform.
- Email delivery providers — to send authentication, transactional, and support emails.
- Analytics providers — to understand aggregate usage (no selling of personal data).
- Authorities — where required by law.
All payments are securely processed through our payment provider, Paddle. We never see or store your full card details.
6. Data Retention
We retain account information for as long as your account is active and for a reasonable period afterward to comply with legal, tax, and accounting obligations, after which it is deleted or anonymized.
7. Your Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise these rights, email privacy@clockthatcare.com. If you're in the UK/EEA, you also have the right to complain to your local data protection authority.
8. Security
We use appropriate technical and organizational measures — encrypted connections, hashed passwords, access controls, and regular security review — to protect your information. No system is 100% secure; please use a strong, unique password and keep it confidential.
9. Cookies
We use cookies and similar technologies that are essential to authentication and Platform security. Where we use analytics or preference cookies, you can manage them in your browser settings.
10. Children
Clock That Care is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact privacy@clockthatcare.com.
11. International Transfers
Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for such transfers.
12. Changes
We may update this Policy from time to time. Material updates require your re-acceptance before continuing to use the Platform.
13. Contact
Privacy questions: privacy@clockthatcare.com