Last Updated: October 5, 2025
Introduction
Gain Publications (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, purchase our books or software, or interact with our services.
This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable federal and state privacy regulations.
By using our website and services, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Personal Information You Provide
We may collect the following personal information when you:
- Create an account
- Make a purchase
- Subscribe to our newsletter
- Contact us
- Download software or resources
Information collected includes:
- Name
- Email address
- Mailing address
- Phone number
- Payment information (processed securely through third-party payment processors)
- Username and password
- Purchase history
- Product preferences
1.2 Automatically Collected Information
When you visit our website, we automatically collect:
- IP address
- Browser type and version
- Device information (type, operating system)
- Pages visited and time spent
- Referring website
- Location data (city, state, country based on IP)
- Cookies and similar tracking technologies
1.3 Information from Third Parties
We may receive information from:
- Payment processors (transaction confirmations)
- Social media platforms (if you connect your accounts)
- Microsoft services (if you use Microsoft login or services)
- Analytics providers
- Marketing partners
2. How We Use Your Information
We use your personal information for the following purposes:
2.1 Service Delivery
- Process and fulfill orders for books and software
- Deliver digital products and downloads
- Provide customer support
- Send order confirmations and updates
- Manage user accounts
2.2 Communication
- Send newsletters and promotional materials (with your consent)
- Respond to inquiries and requests
- Provide updates about products and services
- Send important notices about changes to our services
2.3 Business Operations
- Improve our website and services
- Analyze usage patterns and trends
- Prevent fraud and enhance security
- Comply with legal obligations
- Enforce our terms and conditions
2.4 Marketing and Personalization
- Personalize your experience
- Send targeted marketing communications (with consent)
- Conduct market research
- Analyze customer preferences
Legal Basis for Processing (GDPR):
- Contract performance
- Legitimate business interests
- Legal compliance
- Your explicit consent (where required)
3. Cookies and Tracking Technologies
3.1 Types of Cookies We Use
Essential Cookies: Required for website functionality (shopping cart, account login)
Analytics Cookies: Help us understand how visitors use our site (Google Analytics, Microsoft Clarity)
Marketing Cookies: Track visitors across websites to display relevant advertisements
Preference Cookies: Remember your settings and preferences
3.2 Managing Cookies
You can control cookies through your browser settings. However, disabling cookies may limit website functionality.
Cookie Consent: We obtain your consent before using non-essential cookies, as required by law.
4. How We Share Your Information
We do NOT sell your personal information. We may share your data with:
4.1 Service Providers
- Payment processors (Stripe, PayPal, Microsoft Store)
- Email service providers (MailChimp, SendGrid)
- Cloud hosting providers (Microsoft Azure, AWS)
- Analytics providers (Google Analytics, Microsoft Clarity)
- Customer support tools
4.2 Legal Requirements
We may disclose your information when required by law or to:
- Comply with legal processes (subpoenas, court orders)
- Protect our rights and property
- Prevent fraud or illegal activities
- Protect user safety
4.3 Business Transfers
If Gain Publications is involved in a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
4.4 With Your Consent
We may share information with third parties when you explicitly consent.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
5.1 Security Measures
- SSL/TLS encryption for data transmission
- Secure payment processing (PCI DSS compliant processors)
- Regular security audits and updates
- Access controls and authentication
- Data encryption at rest and in transit
- Regular backups and disaster recovery plans
5.2 No Guarantee
While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy:
- Account Information: Until account deletion or 3 years of inactivity
- Purchase Records: 7 years (for tax and legal compliance)
- Marketing Data: Until you withdraw consent or 2 years of inactivity
- Website Analytics: 26 months (Google Analytics default)
- Support Tickets: 3 years after resolution
7. Your Privacy Rights
7.1 Rights for All Users
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal obligations)
- Opt-Out: Unsubscribe from marketing communications
- Data Portability: Receive your data in a structured format
7.2 Additional Rights (GDPR – EU/EEA/UK Residents)
- Restriction: Limit how we use your data
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent at any time
- Lodge a Complaint: File a complaint with your data protection authority
7.3 Additional Rights (CCPA – California Residents)
- Know: What personal information we collect and how it’s used
- Delete: Request deletion of personal information
- Opt-Out: Opt-out of the sale of personal information (we don’t sell data)
- Non-Discrimination: Equal service regardless of privacy choices
7.4 How to Exercise Your Rights
Email us at: privacy@gainpublications.com
Or write to: Gain Publications, 102 South 9th St, Petersburg, IL 62675-1512, United States.
We will respond within 30 days (GDPR) or 45 days (CCPA).
8. International Data Transfers
If you are located outside the United States, your information may be transferred to and processed in the United States or other countries.
For EU/EEA/UK Residents: We ensure adequate protection through:
- Standard Contractual Clauses (SCCs)
- Privacy Shield Framework (where applicable)
- Other approved transfer mechanisms
9. Children’s Privacy
Our services are not intended for children under 16 (or under 13 in the US).
- We do not knowingly collect personal information from children
- If we learn we have collected a child’s information, we will delete it immediately
- Parents/guardians can contact us to request deletion of a child’s data
10. Third-Party Services
10.1 Microsoft Services
If you use Microsoft services to access our products:
- Microsoft’s Privacy Policy applies to Microsoft-collected data
- We may receive limited information from Microsoft (name, email)
- Microsoft may process payments and handle user authentication
10.2 Other Third-Party Links
Our website may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to read their privacy policies.
11. Email Communications
11.1 Transactional Emails
We send necessary emails about:
- Order confirmations
- Download links
- Account updates
- Password resets
You cannot opt-out of transactional emails.
11.2 Marketing Emails
We send promotional emails only with your consent.
To unsubscribe:
12. Do Not Track (DNT) Signals
We currently do not respond to Do Not Track browser signals. We will update this policy if we implement DNT recognition in the future.
13. California Shine the Light Law
California residents can request information about how we share certain personal information with third parties for their direct marketing purposes. Contact privacy@gainpublications.com for this information.
14. Nevada Privacy Rights
Nevada residents can opt-out of the sale of certain personal information. We do not sell personal information as defined by Nevada law. For questions, contact privacy@gainpublications.com.
15. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Changes are effective when posted.
We will notify you of significant changes by:
- Email notification
- Website banner
- Updated “Last Updated” date
Your continued use after changes constitutes acceptance of the updated policy.
16. Contact Information
Data Controller
Gain Publications, 102 South 9th St, Petersburg, IL 62675-1512, United States.
Privacy Inquiries
Email: privacy@gainpublications.com Phone: Not yet available Response Time: Within 30-45 days
EU Representative (if applicable)
[EU Representative Name and Address]
Data Protection Officer (if applicable)
[DPO Contact Information]
17. Specific Compliance Statements
17.1 GDPR Compliance
We comply with GDPR requirements including:
- Lawful basis for processing
- Data minimization
- Purpose limitation
- Storage limitation
- Security measures
- User rights fulfillment
17.2 CCPA Compliance
We comply with CCPA requirements including:
- Notice at collection
- Right to know, delete, and opt-out
- Non-discrimination
- Authorized agent requests
17.3 Federal Trade Commission (FTC) Compliance
We comply with FTC regulations regarding:
- Truthful advertising
- Data security
- Privacy protection
- Children’s privacy (COPPA)
17.4 CAN-SPAM Compliance
Our email marketing complies with CAN-SPAM Act:
- Clear identification as advertisements
- Valid physical address
- Honor opt-out requests within 10 business days
- No deceptive subject lines
18. Data Processing Activities
Categories of Personal Data Processed:
- Identity data (name, username)
- Contact data (email, phone, address)
- Financial data (payment information)
- Transaction data (purchase history)
- Technical data (IP address, browser data)
- Usage data (website interactions)
- Marketing data (preferences, communications)
Purpose of Processing:
- Service delivery
- Customer support
- Marketing and communication
- Analytics and improvement
- Legal compliance
Recipients of Data:
- Internal staff (need-to-know basis)
- Service providers (under contract)
- Legal authorities (when required)
Retention Periods: As specified in Section 6
Security Measures: As specified in Section 5
19. Your Consent
By using Gain Publications’ website and services:
- You consent to this Privacy Policy
- You consent to the collection and use of information as described
- For marketing: You can withdraw consent at any time
20. Glossary
Personal Data: Information that identifies you as an individual
Processing: Any operation performed on personal data
Data Controller: Entity that determines purposes and means of processing (Gain Publications)
Data Processor: Entity that processes data on behalf of the controller
Third Party: Any person or entity other than you or Gain Publications
This Privacy Policy is effective as of the Last Updated date above.
For questions or concerns about this Privacy Policy, contact privacy@gainpublications.com
This privacy policy is designed to comply with GDPR, CCPA, and other applicable privacy laws. However, we recommend having this policy reviewed by a qualified attorney to ensure full compliance with your specific business operations and jurisdictions.