Privacy policy

This policy explains what Bali Belly SOS (operated by [LEGAL ENTITY NAME — add before launch], [Registered business address — add before launch]) collects, why, and what we do with it. The short version: we collect as little as we can, and we never tell an advertising company anything about your health.

What we collect

• Your email address, to deliver what you bought and send your receipt.
• Order details: what you bought, the amount, and the time.
• Payment details are collected and processed by Stripe. We never see or store your full card number.
• How you found us (for example the ad campaign in the link you clicked), attached to your order so we know which ads work.
• Anonymous page counts: daily totals such as “how many people viewed the checkout”. These contain no identifiers.

What we don't collect

• We don't ask about your symptoms or medical history, and nothing you read or tick inside the guide is sent to us.
• Checklist ticks are stored only on your own device.
• We don't require an account or a password.

Cookies and advertising

• Essential cookies: one that keeps you signed in to your purchase, and one that remembers which version of a page you saw.
• Measurement and advertising (only if you allow it): Google Analytics, Google Ads and Meta (Facebook/Instagram) tags. If you decline, they are never loaded.
• If you allow them, these services learn that a visit or a purchase happened and its value. Products are identified by neutral codes. We do not send them symptoms, health information or the content of what you read. For purchases, a hashed (scrambled) version of your email may be sent to Meta so the purchase can be matched to an ad.

Emails we send

• Your receipt and access link, and a fresh access link when you request one.
• One reminder if you started checkout and didn't finish, only if you ticked the box asking for it.
• No newsletters or marketing emails.

Who we share data with

Service providers that help us run the business, under their own privacy terms: Stripe (payments), Resend (email delivery), Vercel and Upstash (hosting and storage), and, with your consent, Google and Meta (measurement).

How long we keep it

Order records are kept for as long as tax and accounting law requires. Anonymous page counts are kept indefinitely. You can ask us to delete your personal data sooner where the law allows.

Your rights

Depending on where you live (including under the GDPR, UK GDPR and the Australian Privacy Act) you may have the right to access, correct, delete or export your data, and to object to certain uses. Email help@example.com and we'll respond within 30 days. You can also complain to your local data protection authority.

Changing your cookie choice

Clear this site's data in your browser settings and the choice will be offered again on your next visit.