Privacy Policy

Effective November 4, 2026 · Updated November 9, 2026

This Privacy Policy explains what personal information I collect through rwdonaldson.com, how I use it, who I share it with, and the choices you have. The site and its services are run by Robert Donaldson, a sole proprietor based in New York (“I”, “me”). If you have questions, email rob@rwdonaldson.com.

The short version: I collect only what I need to reply to you, run your account, take payments and schedule meetings. I don’t sell your information, I don’t send newsletters you didn’t ask for, and I don’t use advertising cookies.

1. Information I collect

Information you give me

  • Contact form: your name, email, company (optional), what you’re interested in, budget (optional) and the details you write about your project or goals.
  • Account and membership: your name, username, email address and password (stored only in encrypted, hashed form), your membership level and your order history.
  • Billing: billing name, address and phone number if you enter them at checkout. Card payments are handled by Stripe; I never see or store your full card number. Stripe shares limited details with me, such as the card brand, last four digits, expiry date and payment status.
  • Messages: the subject and content of messages you send through the member message form or by email, and the date they were sent.
  • Meetings: when you book through the scheduler, your name, email, the meeting time, and anything you add to the booking.
  • Work you share: code, SQL, documents or system details you send for review. Please don’t send passwords, keys, or personal data about your own customers unless we’ve agreed how to handle it.

Information collected automatically

  • Server logs: like most websites, my hosting provider records technical information such as IP address, browser type, pages requested and the date and time, to keep the site running and secure.
  • Simulator activity: once simulators launch, your progress and in-simulator activity, so your work is saved between sessions.
  • Cookies: see section 5.

2. How I use your information

  • To reply to your inquiries and messages, and to provide mentoring, advice, meetings and retainer work.
  • To create and manage your account, apply your membership level, and track your monthly message and meeting allowances.
  • To process payments, renewals and refunds, and keep records for tax and accounting.
  • To send service emails, such as receipts, booking confirmations, account notices and notice of changes to prices, the Terms or this policy.
  • To keep the site secure and prevent fraud or abuse.
  • To meet legal obligations.

I won’t send you marketing emails unless you’ve asked for them, and you can opt out at any time. I don’t use your information for automated decisions that have legal or similarly significant effects on you.

3. Who I share it with

I don’t sell or rent your personal information. I share it only with service providers that help me run the site and services, and only as much as they need:

ProviderWhat forWhat they receive
HostingerWebsite hosting and my business emailEverything stored on the site, server logs, and emails sent to or from rob@rwdonaldson.com
StripeCard payments and subscriptionsYour name, email, billing details and card information you enter at checkout
Cloudflare (Turnstile)Blocking spam and bots on the site’s formsTechnical information from your browser and device, such as IP address and browser characteristics, used only to check that you’re a person
Cal.comScheduling meetingsYour name, email, meeting time and booking notes
The video meeting tool named in your bookingHolding meetingsYour name, email and anything shared during the meeting

Each provider handles your information under its own privacy policy. I may also disclose information if required by law or to protect my rights or the safety of others, or to a successor if my business is ever transferred (in which case this policy would continue to apply).

For retainer clients, I treat your non-public business information as confidential, as described in the Terms of Service.

4. How long I keep it

  • Contact form inquiries that don’t become an account: up to 2 years.
  • Account, membership, messages and meeting records: while your account is open, and up to 2 years after it closes, so I can answer questions about past work.
  • Payment and tax records: up to 7 years, as required for tax and accounting.
  • Server logs: kept by my hosting provider for a limited period under its own policy.

You can ask me to delete your information sooner (see section 6). I’ll delete it unless I need to keep it for a legal reason, such as tax records.

5. Cookies

The site uses only the cookies it needs to work:

  • Login and session cookies (from WordPress and the membership system) to keep you signed in and complete checkout.
  • Performance cookies from the site’s caching system, which help pages load quickly.
  • Cloudflare Turnstile runs a quick, usually invisible check on the site’s forms to tell people from bots. Stripe sets cookies on checkout pages to prevent fraud, and Cal.com sets cookies on its scheduling pages.

I don’t use advertising cookies or sell data to advertisers. You can block or delete cookies in your browser, but you won’t be able to log in without them.

6. Your choices and rights

  • You can view and update your account details at any time on your account page.
  • You can ask me for a copy of your information, ask me to correct it, or ask me to delete it, by emailing rob@rwdonaldson.com. I’ll reply within 30 days.
  • Deleting your account ends your membership and access to the services.
  • Depending on where you live (for example California, other US states, the UK or the EU), you may have additional rights under local law. I’ll honor valid requests from anyone, wherever they live.
  • I won’t treat you differently for exercising your privacy rights.

7. Security

The site uses HTTPS encryption, passwords are stored only in hashed form, payment card details are handled by Stripe, and access to member information is limited to me. No system is perfectly secure, but I take reasonable steps to protect your information, and if a breach affects your personal information I’ll notify you as required by law, including New York’s SHIELD Act.

8. Children

The services are for people 18 and older. I don’t knowingly collect information from anyone under 18. If you believe a minor has given me personal information, email rob@rwdonaldson.com and I’ll delete it.

9. Where information is processed

I’m based in the United States. Your information may be stored and processed in the United States and in other countries where my service providers operate. By using the site, you understand your information may be transferred to those places.

10. Changes to this policy

I may update this policy as the site and services change. I’ll update the date at the top, and for significant changes I’ll email members before they take effect.

11. Contact

Robert Donaldson · New York, United States · rob@rwdonaldson.com