1. Who We Are
The Paid Creative is operated by Ross Scott Jr, based in Edinburgh, Scotland, United Kingdom. We are the data controller responsible for the personal information you provide when using our Platform, purchasing our courses, or signing up to our email list.
If you have any questions about how we handle your data, you can contact us at [email protected].
2. What Data We Collect
We collect the following categories of personal information:
Information you provide directly
Name and email address when you sign up to our email list or purchase a product
Billing information (processed securely by our payment provider — we do not store card details)
Any information you share when contacting us by email or through support channels
Responses to surveys or feedback forms, where you choose to complete them
Information collected automatically
Basic analytics data including pages visited, time on site, and referral source
Device type, browser, and operating system (collected in aggregate, not linked to you personally)
IP address, used for security and fraud prevention purposes
Information from third parties
If you purchase through our platform, our payment processor (such as Stripe or ThriveCart) may share transaction details with us to fulfil your order
If you access content via a third-party platform (such as an email provider or course host), that platform’s own privacy policy also applies
3. How We Use Your Data
We use your personal information for the following purposes:
To process your purchase and deliver access to your course or product
To send transactional emails relating to your order or account
To send marketing emails, including course updates, new products, and content — but only where you have opted in
To respond to support queries or refund requests
To improve our Platform, content, and marketing based on aggregate usage data
To comply with our legal obligations and prevent fraud
We will never use your data for purposes that are incompatible with why it was originally collected.
4. Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases for processing your personal data:
Contract: to fulfil your purchase and deliver the product you have paid for
Legitimate interests: to improve our Platform and protect against fraud
Consent: to send you marketing emails — you can withdraw consent at any time by unsubscribing
Legal obligation: where we are required to retain records under applicable law
5. Email Marketing
If you purchase a product or opt in through our website, you will be added to our email list. We use this to send you course-related content, updates, and occasional promotional offers from The Paid Creative.
You can unsubscribe at any time by clicking the unsubscribe link in any email we send, or by contacting us directly. Unsubscribing from marketing emails will not affect your ability to receive transactional emails related to your purchase.
We use a third-party email service provider to manage our list. Your email address is stored securely on their platform in accordance with their own privacy policy.
6. Sharing Your Data
We do not sell your personal data. We may share your information with trusted third-party service providers who help us operate the Platform, including:
Payment processors (e.g. Stripe, ThriveCart) — to handle transactions securely
Email marketing platforms — to manage and deliver our email communications
Course hosting platforms — to deliver access to your purchased content
Analytics providers — to understand how our website is used
All third-party providers are required to handle your data in accordance with applicable data protection law. We only share the minimum data necessary for each service.
We may also disclose your information if required to do so by law, or to protect our legal rights.
7. Data Retention
We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by law.
Purchase records are retained for 7 years for accounting and legal compliance purposes
Email list data is retained until you unsubscribe or request deletion
Support correspondence is retained for up to 2 years
Once data is no longer needed, it is securely deleted or anonymised.
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of access — you can request a copy of the personal data we hold about you
Right to rectification — you can ask us to correct inaccurate or incomplete data
Right to erasure — you can request that we delete your personal data, subject to legal obligations
Right to restrict processing — you can ask us to limit how we use your data in certain circumstances
Right to data portability — you can request your data in a structured, machine-readable format
Right to object — you can object to processing based on legitimate interests or for direct marketing
Right to withdraw consent — where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
9. Cookies
Our website uses cookies to improve your experience and to help us understand how visitors use our site. Cookies are small text files stored on your device.
We use the following types of cookies:
Essential cookies — necessary for the website to function correctly
Analytics cookies — to understand how visitors interact with our site (e.g. Google Analytics)
Marketing cookies — to track the effectiveness of our advertising (e.g. Meta Pixel), where you have consented
You can control cookie settings through your browser. Please note that disabling certain cookies may affect the functionality of the site.
10. Third-Party Links
Our Platform may contain links to third-party websites, including social media platforms and tools we recommend. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies.
11. International Data Transfers
Some of our third-party service providers are based outside the UK or European Economic Area. Where this is the case, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO, to protect your data in accordance with UK GDPR.
12. Children’s Privacy
Our Platform is not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately so we can take steps to delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by email or by posting a notice on our website. The “Last updated” date at the top of this document will always reflect the most recent revision.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your data, please get in touch:
The Paid Creative
Ross Scott Jr
Edinburgh, Scotland, United Kingdom
The Paid Creative — © 2025 Ross Scott Jr. All rights reserved.