Privacy policy
Privacy Policy
1 Who We Are
Inspire Growth Ventures LLC ("Troovara", "we", "us", "our") is a limited liability company registered in the United States. We operate the website troovara.com and sell digital wellness workbooks and PDF tools.
For the purposes of the GDPR and UK GDPR, we are the data controller in respect of the personal data we collect and process.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and what your rights are. This policy covers data collected through troovara.com, our emails, and any related purchase flows.
2 Data We Collect
| Category | Data collected | Source | Required? |
|---|---|---|---|
| Purchase data | Name, email address, billing country, order details, transaction ID | You, at checkout | Yes — to process your order |
| Payment data | Card last 4 digits, payment method type | Payment processor (Stripe/PayPal) | Yes — to process payment |
| Communication data | Email address, message content, support enquiries | You, when contacting us | Voluntary |
| Usage data | Pages visited, time on site, device type, browser, IP address (anonymised), referral source | Automatically, via cookies/analytics | No — you may opt out |
| Marketing data | Email address, product interests, email engagement (opens, clicks) | You, when subscribing to our emails | Voluntary |
2.1 Data we do NOT collect
- Full payment card numbers (these are handled exclusively by our payment processor)
- Government-issued ID numbers
- Health records or clinical information
- Precise geolocation data
3 How We Use Your Data
- Processing your purchase: Delivering your download link, sending your order confirmation, and providing customer support.
- Email communications: Sending your download, order confirmation, and — if you opt in — our email newsletter and product updates.
- Improving our products and website: Using anonymised analytics data to understand how people use our site and improve it.
- Fraud prevention and security: Detecting and preventing fraudulent orders and unauthorised access.
- Legal compliance: Retaining financial records as required by US tax law and complying with legal obligations.
- Marketing: Sending promotional emails to customers who have opted in. You may unsubscribe at any time.
We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you.
4 Legal Bases for Processing (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the GDPR and UK GDPR require us to identify the lawful basis for each processing activity. Our lawful bases are:
| Processing purpose | Legal basis |
|---|---|
| Processing your purchase and delivering your download | Performance of contract (Art. 6(1)(b) GDPR) |
| Sending order confirmation and transactional emails | Performance of contract (Art. 6(1)(b) GDPR) |
| Responding to your support enquiries | Legitimate interests (Art. 6(1)(f) GDPR) — to provide customer service |
| Sending marketing emails (newsletter, product updates) | Consent (Art. 6(1)(a) GDPR) — you may withdraw at any time |
| Analytics and site improvement | Legitimate interests (Art. 6(1)(f) GDPR) — to improve our service, balanced against your privacy |
| Financial record retention | Legal obligation (Art. 6(1)(c) GDPR) — US tax record requirements |
| Fraud prevention | Legitimate interests (Art. 6(1)(f) GDPR) — to prevent fraud and secure our platform |
5 Who We Share Your Data With
We share your personal data only with the following categories of third parties, and only to the extent necessary to deliver our service:
| Third party | Purpose | Location |
|---|---|---|
| Payment processor (e.g. Stripe, PayPal) | Processing your payment securely | USA (Standard Contractual Clauses for EEA transfers) |
| Email delivery platform (e.g. Klaviyo, Mailchimp) | Delivering your download link, order confirmation, and optional newsletters | USA (Standard Contractual Clauses for EEA transfers) |
| E-commerce platform (e.g. Shopify) | Hosting our store and managing orders | USA / Canada (Standard Contractual Clauses) |
| Analytics platform (e.g. Google Analytics — anonymised) | Understanding website usage to improve service | USA (anonymised; no personal identifiers shared) |
| Legal and regulatory authorities | Complying with legal obligations or responding to lawful requests | Jurisdiction-dependent |
6 Cookies & Tracking
6.1 Essential cookies
We use essential cookies required for the site to function, including session cookies, cart cookies, and security tokens. These cannot be disabled without preventing the site from working.
6.2 Analytics cookies
With your consent, we use analytics cookies (such as Google Analytics with IP anonymisation enabled) to understand how visitors use our site. These are optional and you may opt out at any time.
6.3 Marketing cookies
If you consent, we may use cookies from advertising platforms (such as Meta Pixel, Google Ads) to measure the effectiveness of our advertising campaigns. These cookies track whether you came to our site from an ad. We do not use these to build detailed personal profiles.
6.4 How to manage cookies
You may manage your cookie preferences through our cookie consent banner (shown on first visit), your browser settings, or by emailing us. Opting out of non-essential cookies will not affect your ability to purchase or download products.
For more information about cookies and how to opt out of Google Analytics specifically, visit tools.google.com/dlpage/gaoptout.
7 Data Retention
| Data category | Retention period | Reason |
|---|---|---|
| Purchase records (name, email, order details) | 7 years from purchase | US tax record requirements (IRS) |
| Payment data (last 4 digits only) | 7 years from transaction | Financial record compliance |
| Customer support emails | 3 years from last contact | Reference for disputes and follow-up |
| Marketing email list (subscribers) | Until you unsubscribe, or 2 years of inactivity | Consent-based; we remove inactive subscribers |
| Website analytics | 26 months (anonymised) | Standard Google Analytics retention |
| Download access logs | 12 months | Technical support and fraud prevention |
When your data reaches the end of its retention period, we delete or anonymise it. You may also request deletion of your data at any time (subject to legal retention obligations) by emailing privacy@troovara.com.
8 International Data Transfers
Inspire Growth Ventures LLC is based in the United States. If you are located in the EEA, UK, or Switzerland, your data will be transferred to the US for processing. We ensure adequate protections are in place through:
- Standard Contractual Clauses (SCCs) approved by the European Commission, incorporated into our contracts with US-based service providers.
- UK International Data Transfer Agreements (IDTAs) for transfers to non-adequate countries under UK GDPR.
- Where applicable, reliance on the EU-US Data Privacy Framework for service providers certified thereunder.
By purchasing from Troovara, you acknowledge that your data may be processed in the United States. You have the right to contact us for more information about the specific safeguards in place.
9 Your Rights
Depending on your location, you may have some or all of the following rights regarding your personal data:
How to exercise your rights
To exercise any of the above rights, email privacy@troovara.com from the email address associated with your Troovara purchase. We will respond within 30 days (GDPR standard). We may ask you to verify your identity before processing your request.
There is no charge for exercising your rights unless requests are manifestly unfounded or excessive, in which case we may charge a reasonable fee or refuse to comply (we will inform you if this applies).
Complaints to data protection authorities
If you are in the EEA, you have the right to lodge a complaint with your local supervisory authority. A list of EEA data protection authorities is available at edpb.europa.eu. UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk.
10 California Residents — CCPA/CPRA Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you specific rights in addition to those described above.
10.1 Right to Know
You have the right to request disclosure of the categories of personal information we have collected about you, the purposes for collection, the categories of third parties we share it with, and specific pieces of personal information collected.
10.2 Right to Delete
You have the right to request deletion of your personal information, subject to certain exceptions (such as completing a transaction you have requested, detecting security incidents, or complying with legal obligations).
10.3 Right to Correct
You have the right to request correction of inaccurate personal information we maintain about you.
10.4 Right to Opt Out of Sale or Sharing
We do not sell personal information. We do not share personal information for cross-context behavioural advertising. You do not need to opt out of a sale or share that does not occur.
10.5 Right to Non-Discrimination
We will not discriminate against you for exercising any of your CCPA rights. Exercising your rights will not affect the price or quality of products we offer you.
10.6 Exercising your CCPA rights
Submit a verifiable consumer request by emailing privacy@troovara.com with "CCPA Request" in the subject line. We will respond within 45 days (extendable to 90 days with notice). We may verify your identity before processing your request. You may submit requests up to twice per 12-month period at no charge.
10.7 Categories of personal information collected in the preceding 12 months
- Identifiers (name, email address, IP address)
- Commercial information (purchase history, product preferences)
- Internet or other electronic network activity information (website usage analytics, anonymised)
- Geolocation (country-level only, derived from IP address)
We have not collected sensitive personal information as defined by CPRA, nor have we used automated decision-making in ways that have legal or significantly similar effects on consumers.
11 Children's Privacy
Troovara products are designed for adults (18+). We do not knowingly collect personal data from children under the age of 16. If you are under 16, please do not use our website or purchase our products without parental consent.
If we become aware that we have inadvertently collected personal data from a child under 16, we will delete it promptly. If you believe we may have collected data from a child, please contact us immediately at privacy@troovara.com.
Our Family and Kids product verticals are designed for parents to use with their children — they are purchased and used by adults on behalf of children, not by children directly.
12 Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:
- SSL/TLS encryption for all data transmitted to and from our website
- Payment processing by PCI-DSS compliant third parties (we never handle raw card data)
- Access controls limiting who within our organisation can access personal data
- Regular review of our data handling practices
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant authorities as required by law.
13 Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. If we make material changes, we will notify you by email (to the address associated with your purchase) or by displaying a prominent notice on our website.
We encourage you to review this Privacy Policy periodically. Your continued use of our website after any changes indicates your acceptance of the updated policy.