Privacy

Who is responsible

The controller of personal data processed through this website is:

Black Sheep Digital Ltd operates this website and publishes the book. Contact us about privacy at hello@blacksheepdigital.co.

Hosting and request data

The site is built and hosted with Lovable (see Lovable’s privacy policy) and its infrastructure providers. When you visit, your browser sends ordinary request information that servers process to deliver and secure pages: IP address, requested URL, date and time, browser and device (user agent), language, and the referring page. This may be recorded in technical logs by the hosting providers.

The hosting network (Cloudflare) also sets a security cookie named __cf_bm on every visitor, whatever their analytics choice. It helps tell people from malicious bots, based on signals from your request, and expires after 30 minutes. See Cloudflare’s cookie details.

Visitor analytics, only with your permission

The published site can count visits using an analytics tool provided by our hosting platform. It runs only if you choose Accept analytics. Until you choose, and if you reject, your browser is instructed not to run it, so no analytics events are sent and no analytics cookie is set.

If you accept, page-view events are sent to an address on this site (/~api/analytics). An event can include the page URL, referrer, browser user agent, language settings and an approximate country derived from your browser’s time zone. The tool sets a first-party cookie named session-id containing a random identifier; it expires 30 minutes after your last activity and is refreshed while you keep browsing. The lawful basis for this analytics is your consent.

You can change your mind at any time with Cookie settings in the footer. Withdrawing deletes the session-id cookie and reloads the page so analytics stops straight away. Withdrawing does not affect analytics that took place before. See Cookies and storage. We do not use Google Analytics, a tag manager, advertising pixels or social media trackers.

Calculators stay in your browser

The calorie and protein calculators process the age, sex, height, weight, activity level and maintenance values you enter entirely in your browser. These values are not sent to our servers, not stored after you leave the page, and not included in any analytics event.

Email correspondence

If you email us, we receive your email address, name if given, and the content of your message. The message leaves your browser and passes through your email provider and ours. We use it only to respond and keep a record of the correspondence.

Buying the ebook on Gumroad

Purchase links take you to Gumroad, which runs checkout, payment processing and delivery under its own terms and privacy policy. No card or payment details are entered on this website. Purchase links contain campaign parameters identifying this website and the button position, never calculator values. As the seller, we may receive order information from Gumroad, such as your name, email address and what you bought, to fulfil and support the purchase and meet legal and accounting obligations.

Purposes and lawful bases

• Delivering and securing the site (request data and hosting logs): legitimate interests in operating a working, secure website.
• Replying to genuine questions before or after a purchase: steps at your request before a contract, or performance of a contract; otherwise legitimate interests in answering correspondence.
• Tax, accounting and legal records: legal obligation.

Your right to object: where we rely on legitimate interests, you can object at any time on grounds relating to your particular situation, and we will stop unless we have compelling legitimate grounds or need the data for legal claims.

Visitor analytics: your consent, which you can withdraw at any time through Cookie settings. Your analytics choice itself is remembered in a small preference cookie, which is necessary to respect that choice.

To object, email hello@blacksheepdigital.co.

How long we keep data

We keep personal data only as long as needed for the purpose. Correspondence is kept while the matter is active and for a reasonable period afterwards for our records. Purchase and accounting records are kept for as long as tax and company law require. Hosting logs and analytics data are kept according to our providers’ standard settings. Calculator values are never stored by us.

Who we share data with

We use service providers for hosting, email and ebook sales (Lovable and its infrastructure providers, our email provider and Gumroad). We do not sell personal data. We may disclose data if required by law or to protect our rights.

International transfers

Some of our providers (hosting, email and Gumroad) may process personal data outside the UK or the European Economic Area, including in the United States. UK and EU data protection law only permits such transfers where the destination is covered by adequacy regulations or appropriate safeguards are in place, such as standard contractual clauses or the UK International Data Transfer Addendum. We are confirming the transfer arrangements each provider has in place. You can email hello@blacksheepdigital.co to ask for information about them.

Your rights

Depending on where you live and the lawful basis for processing, you may have the right to access your personal data, have it corrected, have it erased, restrict its processing, object to it (including processing based on legitimate interests), and receive data you gave us in a portable format where portability applies (for example, data processed on the basis of consent or contract). Where processing is based on consent, you can withdraw it at any time. To use these rights, email hello@blacksheepdigital.co. We may need to confirm your identity. We normally respond within one month; this can be extended where the law allows, for example for complex requests, and we will tell you if so.

You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. If you live in the EEA, you can also complain to your local data protection authority. You do not have to contact us first, although we are happy to try to help.

Children

This website and the calculators are intended for adults aged 18 and over. We do not knowingly collect personal data from children.

Security

The site is served over HTTPS and we limit the personal data we handle. No online service can be guaranteed completely secure. Please report security concerns to hello@blacksheepdigital.co.

Changes to this notice

We will update this page when our practices change and revise the date at the top.