Note: Last updated: March 2026. Please review this policy — it was auto-generated and should be verified by legal counsel.
Privacy Policy
This privacy policy explains how Chxrles LTD (trading as Pip Decks), Company No. 11587388, collects, uses, and protects your personal data when you use the website ai.pipdecks.com ("the Site").
1. What Data We Collect
When you use the Site, we may collect the following personal data:
- Name — provided at checkout
- Email address — provided at checkout
- Billing address (country and postcode) — provided at checkout
- Payment details — processed securely by Stripe; we never store your full card number on our servers
- IP address — collected automatically
- Browser and device information — collected automatically (user agent, screen size, etc.)
2. How We Use Your Data
We use your personal data for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Processing your payment and delivering the course | Contract |
| Sending transactional emails (purchase confirmation, access links) | Contract |
| Error tracking and site security | Legitimate interest |
| Analytics (with your consent) | Consent |
| Marketing emails (with your consent) | Consent |
| Conversion tracking (with your consent) | Consent |
3. Third-Party Services
We share data with the following third-party services to operate the Site:
| Service | Purpose | Location | Legal Basis |
|---|---|---|---|
| Stripe | Payment processing | US | Contract |
| Resend | Transactional email (purchase confirmations, access links) | US | Contract |
| Sentry | Error tracking and monitoring | US | Legitimate interest |
| Wistia | Video hosting and playback | US | Contract |
| Trustpilot | Reviews widget | EU/US | Legitimate interest |
| Klaviyo | Email marketing (only with your consent) | US | Consent |
| Google Analytics (GA4) | Website analytics (only with your consent) | US | Consent |
| Meta Conversions API | Server-side conversion tracking (only with your consent) | US | Consent |
Payment Processing (Stripe)
All payments on the Site are processed by Stripe. When you make a purchase, your card details are entered directly into Stripe's secure payment form (Stripe Elements). Your full card number, CVC, and expiry date never touch our servers. We receive only a tokenised reference, the last four digits of your card, and your billing country/postcode — which we need to process the transaction and detect your currency. Stripe's privacy policy is available at stripe.com/privacy.
Email Marketing (Klaviyo)
If you opt in to marketing emails at checkout (via an explicit checkbox), your name and email address are shared with Klaviyo for the purpose of sending you course-related updates and offers. You can unsubscribe at any time using the link in any email, or by contacting support@pipdecks.com. We do not add you to any marketing list without your explicit consent.
Server-Side Conversion Tracking (Meta Conversions API)
With your consent (given via the cookie consent banner), we send purchase and page view events to Meta (Facebook) via their server-side Conversions API. This data is used to measure the effectiveness of our advertising. Events are sent from our server, not your browser, and include hashed identifiers (such as a hashed email address) to match conversions. No raw personal data is sent to Meta in plain text.
Error Monitoring (Sentry)
We use Sentry to detect and fix errors on the Site. Sentry may receive technical data such as your IP address, browser type, and the URL where an error occurred. We have configured Sentry with PII (personally identifiable information) redaction enabled, meaning sensitive data such as email addresses and names are stripped from error reports before they are stored. Sentry's privacy policy is available at sentry.io/privacy.
Video Hosting (Wistia)
Course video content is hosted and delivered by Wistia. When you watch a video, Wistia may set cookies to remember your playback preferences and track viewing progress. Wistia receives your IP address and browser information as part of delivering the video stream. Wistia's privacy policy is available at wistia.com/privacy.
4. Cookies
We use cookies on the Site. They fall into three categories: necessary, analytics, and marketing. Only necessary cookies are set without your consent. Analytics and marketing cookies are only set after you give consent via the cookie consent banner that appears when you first visit the Site. You can change your preferences at any time by clicking the cookie settings link in the footer.
Strictly Necessary
These cookies are required for the Site to function. They do not require your consent.
| Cookie | Purpose | Duration |
|---|---|---|
access_token |
Authenticates your course access session (signed, HttpOnly — not accessible to JavaScript) | Session |
currency |
Stores your detected currency for pricing | 30 days |
cookie_consent |
Stores your cookie consent preferences | 1 year |
Functional
These cookies are used by third-party services that provide site functionality.
| Cookie | Provider | Purpose |
|---|---|---|
| Wistia cookies | Wistia | Video playback preferences and progress |
| Trustpilot cookies | Trustpilot | Reviews widget display |
Analytics (Consent Required)
| Cookie | Provider | Purpose |
|---|---|---|
_ga, _ga_* |
Google Analytics | Website usage analytics |
Marketing (Consent Required)
| Cookie | Provider | Purpose |
|---|---|---|
_fbp, _fbc |
Meta / Facebook | Conversion tracking |
| Klaviyo cookies | Klaviyo | Email marketing tracking |
You can manage your cookie preferences at any time using the cookie consent banner on the Site.
5. International Data Transfers
Some of our third-party processors are based in the United States. Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework (DPF).
6. Data Retention
- Stripe retains payment data in accordance with their own privacy policy and legal obligations
- Klaviyo retains your email and marketing data until you unsubscribe or request deletion
- Cookies are retained as described in the cookie table above
- Transactional data (order records) is retained as required for legal and accounting purposes
7. Your Rights (GDPR)
Under UK GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate personal data
- Erase your personal data ("right to be forgotten")
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time for analytics and marketing processing
- Object to processing based on legitimate interest
- Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, email support@pipdecks.com.
8. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date.
9. Contact
If you have any questions about this privacy policy or how we handle your data, contact us at:
Email: support@pipdecks.com Company: Chxrles LTD (trading as Pip Decks), Company No. 11587388