Privacy Policy (Global)
Last Updated: August 21, 2025
Who we are
SCADA & Beyond with Alana (“we,” “us,” “our”) provides educational resources and digital products. This Policy explains how we collect, use, disclose, and protect personal information when you visit our website, download resources, or purchase products.
Data controller & contact
We are the data controller for our website and store.
Email: alana@alanamurray.com
Mailing Address:
40 Bedros Ln.
Halifax, Nova Scotia
Canada
B3M 4X1
Information we collect
You provide: name, email, billing details, postal address (if needed for invoices), support messages, and form submissions.
Automatically: IP address, device/browser type, pages viewed, time on page, referring URL, and cookie/analytics data.
From third parties: payment status from Stripe/PayPal; subscription status from FluentCRM; service logs from SureCart and WordPress plugins.
Why we use your information (purposes & legal bases)
Provide products/services & customer support (to perform a contract with you).
Send educational updates & marketing when you opt in or where permitted (your consent; you can withdraw anytime).
Improve our site, prevent fraud, and secure our systems (our legitimate interests, balanced against your rights).
Comply with legal/recordkeeping obligations (legal obligation).
Marketing emails & your choices (CASL/GDPR/CPRA)
If you download a resource or subscribe, we may send periodic emails about new content and resources. Every message includes our mailing address and an unsubscribe link. You can also email us to update preferences.
Cookies & analytics
We use cookies and similar technologies to operate the site (essential), understand performance (analytics), and measure interest in our content. You can manage cookies via your browser. See our separate Cookie Policy for details.
Payments & commerce
Transactions are handled by SureCart (store/checkout) and payment processors Stripe and PayPal. We do not store full payment card numbers on our servers. We use transaction data for billing, receipts, fraud prevention, and compliance.
Data sharing
We do not sell personal information. We share it only with:
Service providers/processors acting on our instructions, including:
- SureCart (storefront/checkout, license fulfillment)
- Stripe / PayPal (payment processing)
- FluentCRM (email delivery, subscriber management)
- Google Analytics (GA4) (site analytics)
- WordPress plugins (forms, security, spam filtering, backups, performance)
Professional advisors and authorities when required by law;
Business transfers (e.g., merger, sale, or reorganization).
International transfers
Your data may be processed outside your province/state/country (e.g., Canada, U.S., EU/UK). Where required, we use appropriate safeguards such as EU Standard Contractual Clauses and the UK IDTA/Addendum to help protect your information.
Retention
We retain personal information only as long as necessary for the purposes above and to meet legal requirements, then delete or anonymize it. Examples:
- Customer/account records: 7 years after last purchase (tax/recordkeeping).
- Marketing contacts: 24 months after last interaction or until you unsubscribe.
- Analytics data: per our Cookie Policy (e.g., 14 months for GA4, if configured).
Security
We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the data. No method of transmission or storage is 100% secure. In case of a data breach affecting your personal information, we will notify you as required by applicable law.
Your rights (by region)
Canada (PIPEDA): Request access to and correction of personal information under our control.
EEA/UK (GDPR/UK GDPR, if we offer goods/services or monitor behaviour in your region): Rights may include access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may lodge a complaint with your supervisory authority.
California (CCPA/CPRA): You may request access, deletion, and correction and opt out of “selling” or “sharing” for cross-context behavioural advertising. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
How to exercise rights
Email alana@alanamurray.com. We may need to verify your identity. We will respond within applicable legal timelines (e.g., 1 month under GDPR; 45 days under CPRA, extendable as permitted).
Children’s privacy
Our site and resources are intended for adults. We do not knowingly collect personal information from children under 16 (or a higher local age, as applicable).
Changes to this Policy
We may update this Policy. The “Last Updated” date shows the latest version. Material changes will be highlighted here.
