This Privacy Policy explains how Bosau Digital LLC, the company operating Python & VBA at pythonandvba.com and learn.pythonandvba.com (“we”, “us”, or “our”), collects, uses, and protects your personal data when you visit our websites or purchase our products.

1. Who We Are

Python & VBA is operated by Bosau Digital LLC, a limited liability company registered in New Mexico, United States. Bosau Digital LLC is the data controller responsible for the personal data described in this policy. For any privacy-related questions, please contact us at contact@pythonandvba.com.

2. What Data We Collect

Analytics

We use Rybbit for website analytics. Rybbit is a privacy-first, cookieless analytics platform. It collects:

• Pages visited and time spent on each page
• Browser type and operating system
• Screen resolution and device type
• General geographic location (country and region, derived from your IP address; the IP address itself is never stored)
• Referring website and UTM parameters

Rybbit does not use cookies, does not store IP addresses, and does not collect personally identifiable information. No cookie consent banner is required for Rybbit analytics.

Contact Form Data

When you contact us through our website, we collect your name and email address to respond to your enquiry. This data is not shared with third parties and is retained only as long as necessary to resolve your enquiry.

Purchase Data

When you purchase a product, your payment and billing information is processed by our payment processors: Pabbly Subscription Billing, Stripe, and/or PayPal. We receive your email address and details of the product(s) purchased for the purpose of delivering your order and managing your license. We do not store your full payment card details.

Please refer to the respective privacy policies of our payment processors:

• Pabbly Privacy Policy
• Stripe Privacy Policy
• PayPal Privacy Policy

Learning Platform Accounts (learn.pythonandvba.com)

When you sign in to our learning platform, we collect your email address and, for course buyers, the name provided at checkout. Sign-in uses a one-time code sent to your email; a strictly functional session cookie keeps you signed in. No password is stored.

For enrolled students we store:

• Course progress: which lessons you have completed and opened, and your overall progress. Records of opened lessons are also used to determine refund eligibility under our Refund Policy.
• Certificates: the name you choose to print on a certificate of completion. Certificates can be verified through a public certificate link that shows the holder name, course title, and issue date.
• Community content: questions and replies you post in the course Q&A, and any ratings or reviews you submit. Reviews appear publicly only if you explicitly opt in, and you can withdraw that consent at any time by editing your review.

Course videos are streamed via Bunny.net, our video delivery network, which processes your IP address to deliver the video stream. Transactional emails (sign-in codes, purchase access links, Q&A notifications) are sent via Postmark. Course buyers are added to our customer list in our self-hosted CRM so we can send purchase-related updates; you can unsubscribe from non-essential emails at any time.

License Activation Data

Our software products include a license activation system. When you activate a product, your license key is verified against our server. This process records the activation event and device details necessary to enforce the per-device license limit. No personally identifiable information beyond what is required for license validation is transmitted or stored.

Error Reporting

Some of our products automatically send anonymous error reports to our server when an unexpected issue occurs. These reports help us identify and fix bugs. They do not intentionally include personally identifiable information, but may contain technical details such as your Excel version, operating system, and the nature of the error.

3. How We Use Your Data

• To deliver products you have purchased and send download links, license keys, or course access
• To operate your learning account: track course progress, issue certificates, and display your Q&A posts and reviews
• To determine refund eligibility for online courses
• To send transactional emails such as sign-in codes and purchase confirmations
• To respond to your support and contact enquiries
• To activate and manage software licenses
• To improve our products using anonymous error reports
• To understand how our website is used via anonymous analytics

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

• Contract performance: Processing your purchase and delivering your product
• Legitimate interests: License activation, anonymous error reporting, and anonymous analytics to improve our products
• Legal obligation: Retaining transaction records as required by applicable law

5. Data Sharing

We do not sell your personal data. We share data only with:

• Payment processors (Pabbly, Stripe, PayPal) to process your purchase
• Rybbit for anonymous, cookieless website analytics
• Bunny.net to stream course videos on the learning platform
• Postmark to deliver transactional emails such as sign-in codes and purchase access links
• Hosting providers that run our websites, learning platform, and self-hosted services

These providers process data only as needed to provide their service to us. No other third parties receive your personal data.

We are based in the United States, so personal data described in this policy is processed in the United States and/or in the countries where our service providers operate. Where personal data of EEA or UK residents is transferred internationally, our service providers rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.

6. Cookies

Our website does not use tracking cookies or advertising cookies. Rybbit analytics is fully cookieless and does not require a consent banner.

WordPress, the platform powering this website, may set strictly functional cookies for session management (for example, if you are logged in as a registered user). These are necessary for the website to function and do not track you across other websites.

learn.pythonandvba.com sets a strictly functional session cookie when you sign in. It only keeps you signed in and does not track you across other websites; no consent banner is required for it.

Payment processors (Stripe, PayPal, Pabbly) may set their own cookies on their respective checkout pages. Please refer to their privacy policies for details.

7. Data Retention

• Purchase and license records: Retained for as long as necessary to support your license and comply with legal obligations
• Learning platform data: Progress, Q&A posts, reviews, and certificates are retained while your enrollment is active so your access and records keep working; you can request deletion at any time
• Contact enquiries: Deleted once your enquiry has been resolved
• Analytics data: Retained per Rybbit’s data retention policy
• Error reports: Retained for a reasonable period to diagnose and resolve issues

8. Your Rights

If you are located in the EEA or UK, you have the following rights under GDPR:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (“right to be forgotten”)
• Restriction: Request that we limit how we use your data
• Portability: Request your data in a machine-readable format
• Objection: Object to processing based on legitimate interests

To exercise any of these rights, please contact us at contact@pythonandvba.com. We will respond within 30 days.

9. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. License activation and error reporting data is transmitted over encrypted connections.

10. Children’s Privacy

Our website and products are not directed at children under the age of 16. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. Continued use of our website or products after changes are posted constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or to exercise your rights, please contact: