Privacy Policy
Effective date: 28 February 2026
Your privacy matters. This policy explains what data we collect, why we collect it, who we share it with, and your rights.
Who We Are
Section titled “Who We Are”MyEngineeringPath is operated by Mohit Saxena as a sole operator based in Australia. Our website is myengineeringpath.dev.
For any privacy-related questions or data requests, contact us at [email protected].
Data We Collect
Section titled “Data We Collect”Browsing Data (Automatic)
Section titled “Browsing Data (Automatic)”When you visit our site, we collect anonymous usage data through:
- Google Analytics 4 (GA4) — page views, session duration, referral source, device type, and approximate location (country/city level). We have enabled IP anonymisation, so your full IP address is never stored. GA4 uses cookies — see our Cookie Notice for details.
- Vercel Analytics — page views and web vitals. This tool is cookie-free and does not collect personal data.
- Vercel Speed Insights — page load performance metrics. Cookie-free, no personal data.
- Microsoft Clarity — heatmaps, session recordings, and interaction analytics (clicks, scrolling, mouse movement). Clarity helps us understand how visitors interact with the site so we can improve usability. Clarity does not capture passwords or sensitive form fields. See Microsoft Clarity’s Privacy Statement.
Lawful basis: Legitimate interest in understanding how our content is used and improving the site.
Email Address (Voluntary)
Section titled “Email Address (Voluntary)”If you subscribe to our newsletter, we collect your email address. We store it in Kit (formerly ConvertKit), our email marketing platform, along with the date you subscribed and the source (e.g., footer form).
Lawful basis: Consent. You can unsubscribe at any time.
Purchase Data (Via Lemon Squeezy)
Section titled “Purchase Data (Via Lemon Squeezy)”When you buy a digital product, your payment is processed by Lemon Squeezy, which acts as the Merchant of Record. Lemon Squeezy collects your name, email, billing address, and payment details. We receive your name, email, and order details — but we never see or store your full credit card number.
Lawful basis: Contract performance (fulfilling your purchase).
Testimonial Data (Voluntary)
Section titled “Testimonial Data (Voluntary)”If you submit a testimonial, we store your name, role, company (optional), and testimonial text. Testimonials may be displayed publicly on the site.
Lawful basis: Consent. You can request removal at any time.
Third-Party Processors
Section titled “Third-Party Processors”We share data with the following service providers, each of which has their own privacy policy:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Lemon Squeezy | Payment processing, tax handling, order fulfilment | lemonsqueezy.com/privacy |
| Google Analytics | Website analytics | policies.google.com/privacy |
| Vercel | Website hosting, analytics, speed insights | vercel.com/legal/privacy-policy |
| Kit | Email marketing (newsletter subscribers) | kit.com/privacy |
| Cloudflare | DNS, CDN, email routing | cloudflare.com/privacypolicy |
| Microsoft | Session recording and heatmaps (Clarity) | privacy.microsoft.com |
We do not sell your data to any third party. We do not share your data with advertisers.
Cookies
Section titled “Cookies”We use a limited number of cookies for analytics purposes only. For a full list of cookies, their purposes, and how to manage them, see our Cookie Notice.
Email Communications
Section titled “Email Communications”We distinguish between two types of email:
- Transactional emails — purchase receipts, download links, and refund confirmations. These are sent by Lemon Squeezy as part of your purchase and do not require separate consent.
- Marketing emails — content updates and product announcements sent to newsletter subscribers. You can unsubscribe from these at any time using the link in each email.
We will never email you promotional content unless you have explicitly subscribed.
Your Rights
Section titled “Your Rights”GDPR Rights (EEA/UK Residents)
Section titled “GDPR Rights (EEA/UK Residents)”Under the General Data Protection Regulation, you have the right to:
| Right | Description |
|---|---|
| Access | Request a copy of the personal data we hold about you |
| Rectification | Ask us to correct inaccurate data |
| Erasure | Ask us to delete your data (“right to be forgotten”) |
| Portability | Receive your data in a structured, machine-readable format |
| Restriction | Ask us to limit how we process your data |
| Objection | Object to processing based on legitimate interest |
| Withdraw consent | Withdraw consent at any time (e.g., unsubscribe from newsletter) |
CCPA Rights (California Residents)
Section titled “CCPA Rights (California Residents)”Under the California Consumer Privacy Act, you have the right to:
- Know what personal information we collect and why
- Delete your personal information
- Opt out of the sale of personal information (we do not sell your data)
- Non-discrimination for exercising your privacy rights
To exercise any of these rights, email [email protected]. We will respond within 30 days.
Data Retention
Section titled “Data Retention”| Data Type | Retention Period |
|---|---|
| Purchase records | 7 years (tax and legal requirements) |
| Newsletter email | Until you unsubscribe |
| Analytics data | Per provider defaults (GA4: 14 months) |
| Testimonials | Until you request removal |
Children’s Privacy
Section titled “Children’s Privacy”MyEngineeringPath is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
Data Security
Section titled “Data Security”We use industry-standard security measures including HTTPS encryption, secure hosting on Vercel, and access controls on our database. However, no method of transmission over the internet is 100% secure.
International Data Transfers
Section titled “International Data Transfers”Your data may be transferred to and processed in countries outside your country of residence. Our service providers are primarily based in the United States:
| Provider | Country | Legal Safeguard |
|---|---|---|
| Google (Analytics) | US | EU-US Data Privacy Framework (DPF) |
| Vercel | US | Standard Contractual Clauses (SCCs) |
| Kit | US | Standard Contractual Clauses (SCCs) |
| Lemon Squeezy | US | Standard Contractual Clauses (SCCs) |
| Cloudflare | US | EU-US Data Privacy Framework (DPF) |
| Microsoft (Clarity) | US | EU-US Data Privacy Framework (DPF) |
For EEA/UK residents: These transfers are protected by appropriate safeguards as required by the GDPR. You can request a copy of the relevant safeguard documentation by contacting us.
Data Breach Notification
Section titled “Data Breach Notification”In the event of a personal data breach that poses a risk to your rights and freedoms:
- GDPR: We will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and affected individuals without undue delay where the breach is likely to result in a high risk.
- Australia: We will comply with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988, notifying the Office of the Australian Information Commissioner (OAIC) and affected individuals as required.
Changes to This Policy
Section titled “Changes to This Policy”We may update this Privacy Policy as our services or legal requirements change. The effective date at the top of this page will be updated accordingly. If we make significant changes, we will note them here.
Contact
Section titled “Contact”For all privacy-related questions, data access requests, or concerns:
See also: Cookie Notice | Terms & Conditions | Refund Policy