Privacy Policy
1. Scope of This Policy
This Privacy Policy describes how Sentinel Asset Holdings LLC (“Sentinel,” “we,” “us,” or “our”), through its publishing imprint Ledgerstone Press and the website leaddontbleed.com (the “Site”), collects, uses, retains, and discloses personal information. It applies to visitors to the Site, subscribers to any Ledgerstone Press email list, and purchasers of digital products published under the Lead. Don’t Bleed.™ doctrine.
This policy applies to personal information processed in the course of operating the Site and the publishing imprint. It does not govern third-party services the visitor reaches by external link.
2. Information We Collect
We collect only the personal information necessary to operate the publication, deliver the products, and meet legal obligations.
Information you provide directly. Email address (when subscribing, requesting a diagnostic workbook, or creating an account). Name (optional, where requested). Billing information processed by our merchant of record (Lemon Squeezy; we do not receive or retain full payment card numbers). Correspondence content (when you contact us).
Information collected automatically. IP address, device type, operating system, browser type and version, referring URL, pages viewed, session duration, and approximate geographic location derived from IP — through standard server logs and the analytics technologies described in Section 4.
Information from third parties. Where you complete a purchase, our merchant of record provides transaction confirmation data (order ID, product purchased, transaction status).
We do not collect information from children under 18. The Site is operated for an adult professional audience. See Section 10.
3. How We Use Information
- To deliver the digital products, diagnostics, and publications you have requested or purchased.
- To send the email sequences associated with the list you joined.
- To process and confirm transactions through our merchant of record.
- To respond to inquiries sent to our published contact addresses.
- To monitor Site performance, diagnose technical issues, and maintain security.
- To analyze aggregated traffic patterns and inform editorial cadence.
- To meet legal, tax, and contractual obligations.
We do not sell personal information. We do not rent, share, or trade email lists. We do not use personal information for behavioral advertising profiles. We do not deploy persistent cross-site tracking beyond what is disclosed in Section 4.
4. Cookies, Analytics, and Similar Technologies
Necessary. Session cookies required for the Site to function — cart state, authentication, security tokens, and consent state. These cannot be disabled.
Analytics. Google Analytics 4 (“GA4”), used to measure aggregated traffic patterns, configured with IP anonymization and a limited retention window. Analytics cookies are set only after consent where required by law.
Marketing. ConvertKit pixel and embedded form code, used to associate subscribers with the list they joined and deliver the welcome sequence; Lemon Squeezy session cookies, used to maintain checkout state.
The Site does not deploy advertising retargeting pixels, social media tracking pixels, or third-party advertising cookies. A cookie consent banner is presented on first visit, with granular controls. Necessary cookies are enabled by default; analytics and marketing remain off until accepted.
5. Legal Bases (GDPR / UK GDPR)
- Consent (Art. 6(1)(a)) — for analytics and marketing cookies, and for joining an email list.
- Performance of a contract (Art. 6(1)(b)) — for delivering products and subscriptions you have purchased.
- Legal obligation (Art. 6(1)(c)) — for tax, accounting, and regulatory record-keeping.
- Legitimate interest (Art. 6(1)(f)) — for security monitoring, fraud prevention, and aggregate traffic analysis.
Consent can be withdrawn at any time without affecting the lawfulness of processing already carried out.
6. Third-Party Services
ConvertKit (Kit). Email list management and automation. Google Analytics 4. Aggregated traffic analytics with IP anonymization. Lemon Squeezy. Merchant of record for all paid digital products; processes payment information, calculates and remits applicable sales tax and VAT, and issues receipts. WordPress hosting infrastructure. Processes standard server logs for security and performance. Email infrastructure. Transactional email is delivered through our email service provider. No other third-party services receive personal information processed through the Site.
7. Your Rights
Under the GDPR and UK GDPR (Arts. 15–22): access, rectification, erasure, restriction of processing, data portability, objection (including to direct marketing), protection against legal-effect automated decision-making, and the right to lodge a complaint with your national supervisory authority.
Under the CCPA / CPRA: the right to know, to access, to delete, to correct, to opt out of the sale or sharing of personal information (we do not sell or share as those terms are defined under California law), to limit use of sensitive personal information (we do not collect any), and to non-discrimination for exercising these rights.
To exercise any of these rights, contact licensing@leaddontbleed.com. We respond within the timeframes required by applicable law (30 days under GDPR; 45 days under CCPA, extendable once). We may verify your identity first.
8. Data Retention
- Email subscriber records — active subscription plus 24 months after last engagement, unless earlier deletion is requested.
- Transaction records — seven years (tax and accounting obligations).
- Server logs — 90 days, then purged.
- Analytics data — per the GA4 default 14-month window, configurable down.
- Correspondence — 24 months from the last reply.
Deletion requests under Section 7 supersede default retention windows except where retention is required by law.
9. International Transfers
The Site is operated from the United States. Personal information collected outside the U.S. may be transferred to and processed in the U.S. Where required, transfers from the EEA, the UK, or Switzerland are made under the European Commission’s Standard Contractual Clauses or an equivalent transfer mechanism implemented by the third-party processor.
10. Children’s Privacy
The Site is operated for adult professional audiences and is not directed to children under 18. We do not knowingly collect personal information from children under 18. If a parent or guardian becomes aware that a child has provided personal information, contact licensing@leaddontbleed.com and we will delete it.
11. Security
Personal information is held on infrastructure protected by industry-standard administrative, technical, and physical safeguards: TLS in transit, encryption at rest where supported, role-based administrative access, and routine credential rotation. No transmission or storage system is absolutely secure.
12. Changes to This Policy
This policy may be updated to reflect changes in operating practice, third-party services, or applicable law. Material changes will be reflected in the “Effective date” and “Last updated” fields above. Subscribers will be notified of material changes by email where the change requires renewed consent.
13. Contact
For privacy inquiries, rights requests, or to update your contact preferences: licensing@leaddontbleed.com. For general business correspondence: info@leaddontbleed.com. For media and press: licensing@leaddontbleed.com. Mailing address available upon request to verified rights requesters.