Privacy Policy

Who we are

ACA Notes is a sole trader business based in Ireland, selling printed study notes and digital study tools for Chartered Accountants Ireland (CAI) examinations. References to "we", "us", and "our" in this policy refer to ACA Notes.

For data protection purposes, ACA Notes is the data controller for personal data collected through this website.

Contact: hello@acanotes.com

What data we collect and why

When you make a purchase

When you place an order, your payment is processed by Stripe. We do not store your card details. Stripe collects and processes payment data under their own privacy policy and PCI-DSS compliance.

As part of the checkout process, we collect:

• Your name and email address (from Stripe Checkout)
• Your delivery address for physical orders
• Order details (products purchased, amount paid)

This data is used to fulfil your order, send purchase confirmation and fulfilment emails (including AI Tutor access links), and handle any queries or refund requests.

Legal basis: Contract performance (Article 6(1)(b) GDPR).

Email communications

We send transactional emails related to your purchase — order confirmation (via Stripe), fulfilment emails (via Resend), and any support correspondence. We do not send marketing emails without your separate consent.

Website usage

We do not currently use analytics tools (such as Google Analytics) on this website. No tracking cookies are set. This may change after launch, at which point this policy will be updated and appropriate cookie consent will be implemented.

Who we share data with

We share data only with third-party services essential to operating this business:

• Stripe — payment processing. Your payment data is handled by Stripe under their own privacy policy and PCI-DSS compliance. Stripe may be subject to transfers outside the EU; they operate under appropriate safeguards.
• Resend — transactional email delivery for fulfilment emails. Only your email address and the content of the email are shared.
• Cloudflare — website hosting and delivery. Cloudflare processes request data as part of serving the site. See Cloudflare's privacy policy for details.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

How long we keep data

Order records are retained for 7 years in compliance with Irish tax and accounting obligations. Email communications are retained for as long as necessary to support customer service and refund requests.

You may request deletion of your data at any time, subject to our legal retention obligations.

Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data, where we have no legal obligation to retain it
• Object to certain processing
• Portability of your data in a machine-readable format
• Lodge a complaint with the Data Protection Commission (Ireland) if you believe your rights have been infringed

To exercise any of these rights, email hello@acanotes.com. We will respond within 30 days.

Security

This website is served over HTTPS. Payment processing is handled entirely by Stripe — we do not handle, store, or transmit card data. Order and customer data stored in Stripe is subject to Stripe's security standards.

Changes to this policy

We will update this policy if our data practices change. The "last updated" date at the top of this page will reflect the most recent revision. For significant changes, we will take reasonable steps to notify affected users where possible.

Contact

For any privacy-related questions, email hello@acanotes.com.

You may also contact the Data Protection Commission (Ireland) at dataprotection.ie.