Privacy Policy

This Privacy Policy explains how Brendan D. Murphy (brendandmurphy.com) collects, uses, and protects your personal information. It is compliant with the Australian Privacy Act 1988 (including the Australian Privacy Principles) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. What Data We Collect

This website collects minimal personal data. The only personal information actively collected is your email address, and only when you voluntarily submit it—for example, by signing up for the newsletter or joining a book launch waitlist.

We do not collect names, postal addresses, phone numbers, or payment information directly through this website. Any purchases made via Amazon or other third-party platforms are handled entirely by those platforms under their own privacy policies. Payments processed directly through this website are handled by Stripe under their own privacy policy.

Anonymous usage data may be collected via Meta Pixel for advertising measurement purposes.

2. How Your Data Is Used

Email addresses submitted through this site are used solely to send you newsletters, research updates, and book launch announcements via Substack. Substack is the third-party platform used to manage and distribute this content.

By submitting your email address, you consent to receiving these communications. You may unsubscribe at any time via the unsubscribe link included in every email, or by contacting us directly at privacy@brendandmurphy.com.

Your email address will not be used for any other purpose without your explicit consent.

3. Data Sharing and Third Parties

Your personal data is never sold, rented, or traded to any third party for marketing or commercial purposes.

Data may be shared with the following service providers strictly to operate this website and its communications:

• Substack—newsletter delivery and subscriber management
• Vercel—website hosting and infrastructure (see Section 5)
• Stripe—payment processing for pre-orders (see Section 6)
• Supabase—pre-order data storage (see Section 8)
• Meta Platforms—advertising measurement via Meta Pixel and Conversions API (see Section 7)
• RAEK—visitor identification and analytics (see Section 4)

These providers process data only as necessary to perform their services and are bound by their own privacy policies and applicable data protection laws.

4. Cookies

This website uses only essential cookies required for standard website functionality and performance monitoring. No advertising cookies or third-party tracking cookies are set.

If Vercel Analytics is enabled, anonymous, aggregated usage data (such as page views and device type) may be collected. This data is not personally identifiable and is used solely to understand site performance. No individual user profiles are created.

This website uses the Meta Pixel (Facebook Pixel) to measure the effectiveness of advertising and to understand how visitors interact with the site. The Meta Pixel may collect data including your IP address, browser information, and pages visited. This data is processed by Meta Platforms in accordance with their Data Policy (facebook.com/policy). You can opt out of Meta’s data collection at facebook.com/settings.

This website uses RAEK, a visitor identification and analytics service provided by RAEK, Inc. RAEK may collect information about your visit including your IP address, browser type, pages visited, and other usage data. This information is used to help us understand how visitors interact with the site and to support our marketing efforts. The RAEK script may set cookies or use similar tracking technologies on your device, and may associate your visit data with information from third-party sources for the purposes of audience identification and retargeting. You can learn more about how RAEK collects and uses data by visiting their privacy policy at raekdata.com/legal/policies/privacy. To opt out of RAEK tracking, you may use a browser extension that blocks third-party tracking scripts.

You may disable cookies in your browser settings. This will not affect your ability to access the content on this site.

5. Vercel Hosting

This website is hosted on Vercel. As part of normal website operation, Vercel may collect infrastructure-level data including IP addresses, request logs, and performance metrics. This data is processed by Vercel in accordance with their own privacy policy, which is available at vercel.com/legal/privacy-policy.

6. Payment Processing

Payments for pre-orders are processed by Stripe. When you complete a purchase, your payment card details are submitted directly to Stripe and never transmitted to or stored on our servers. Stripe collects and processes your billing information in accordance with their privacy policy, available at stripe.com/privacy.

We receive from Stripe only the data necessary to fulfil your order: your email address, the tier purchased, and the amount paid. No payment card data is stored by us at any time.

7. Analytics and Advertising

This website uses the Meta Pixel (Facebook Pixel) and the Meta Conversions API to measure the effectiveness of advertising and to understand how visitors interact with the site.

The Meta Pixel may collect data including your IP address, browser information, and pages visited. When a purchase is completed, the Meta Conversions API sends a server-side Purchase event to Meta. Your email address is hashed using SHA-256 before transmission—the original email is never sent to Meta. This data is processed by Meta Platforms in accordance with their Data Policy (facebook.com/policy). You can opt out of Meta’s data collection at facebook.com/settings.

8. Data Storage

Pre-order data (email address, tier, and amount paid) is stored in Supabase, a database platform hosted on AWS infrastructure in the US West (Oregon) region. This data is used solely to manage pre-orders and send production updates during the fulfilment period.

Newsletter subscriber emails collected through this site are managed via Substack and stored on Substack’s infrastructure. You may unsubscribe at any time via the link in any newsletter email or by contacting privacy@brendandmurphy.com.

9. Pre-Order Data

When you place a pre-order, we collect and store your email address, the tier purchased, and the amount paid. This information is used exclusively to manage your pre-order, send production updates, and fulfil delivery of the product.

Pre-order data is retained for the duration of the pre-order campaign and the production and fulfilment period. It is not sold or shared with third parties for marketing purposes. Once fulfilment is complete, data will be retained only as required by applicable financial record-keeping obligations.

10. Data Retention

Email addresses are retained for as long as you remain subscribed to communications from this site. If you unsubscribe or request deletion, your data will be removed from active lists within 30 days.

11. Children Under 16

This website is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that a child under 16 has submitted personal information to this site, we will delete that information from our records promptly. If you believe a child under 16 has provided us with personal information, please contact us at privacy@brendandmurphy.com.

12. International Data Transfers

This website is hosted on Vercel, which operates servers in various jurisdictions including the United States. By using this site and submitting your email address, you acknowledge that your personal data may be transferred to and processed in countries outside your own. Where such transfers occur, appropriate safeguards are in place in accordance with applicable data protection law, including standard contractual clauses approved by the European Commission where required.

13. California Residents

If you are a resident of California, you have the right under the California Consumer Privacy Act (CCPA) to request information about how your personal data is collected and used. Brendan D. Murphy does not sell personal information to third parties. To make a privacy request, contact privacy@brendandmurphy.comwith the subject line “California Privacy Request”.

14. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate data
• The right to request deletion of your data
• The right to withdraw consent at any time (without affecting the lawfulness of prior processing)
• The right to lodge a complaint with a supervisory authority (for EU residents: your national data protection authority; for Australian residents: the Office of the Australian Information Commissioner)

To exercise any of these rights, contact: privacy@brendandmurphy.com. You may also opt out of email communications at any time by emailing privacy@brendandmurphy.comwith the subject line “Unsubscribe”.

15. Governing Law

This Privacy Policy is governed by the laws of New South Wales, Australia. For users in the European Union, the GDPR applies to the extent that personal data is processed in connection with this site.

16. Changes to This Policy

This policy may be updated from time to time to reflect changes in practice or legal requirements. The date of the most recent revision is shown at the top of this page. Continued use of the site following any update constitutes acceptance of the revised policy.

17. Contact

For any privacy-related enquiries or data requests, please contact: privacy@brendandmurphy.com.