tillythecoder.com
tillythecoder.com
Privacy Policy

Privacy Policy

Version 1 · Updated

Privacy Policy of www.tillythecoder.com
This Website collects some Personal Data from its Users.

This document can be printed for reference by using the print command in the settings of any browser.

Owner and Data Controller
Tilly The Coder

Owner contact email: tilly@tillythecoder.com


Types of Data collected
Among the types of Personal Data that this Website collects, by itself or through third parties, there are:

  • Cookies

  • First name, Last name

  • Email address

  • Username

  • Password (encrypted)

  • Profile photo

  • Comments submitted on articles

  • Usage Data (pages visited, time on page, clicks)

  • IP address and coarse location

  • Billing information processed via Stripe (name, billing address, country)

  • Purchase history (courses enrolled)

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to Data collection.
Personal Data may be freely provided by the User, or, in the case of Usage Data, collected automatically when using this Website. Unless specified otherwise, all Data requested by this Website is mandatory and failure to provide this Data may make it impossible for this Website to provide its services.


Mode and place of processing the Data

Methods of processing
The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data. Processing is carried out using computers and/or IT‑enabled tools, following organizational procedures and modes strictly related to the purposes indicated.
In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Website (administration, technical support, marketing, system administration) or external parties (such as hosting providers, email service providers, analytics providers) appointed as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.

Place
The Data is processed at the Owner’s operating offices in London and on servers hosted by Laravel Cloud in Frankfurt, Germany. Depending on the User’s location, data transfers may involve transferring the User’s Data to a country other than their own.

Business Transfers
If Tilly The Coder Ltd. sells, transfers, or merges parts of its business, or is acquired by another company, Personal Data may be transferred to the new owner to continue operating services and providing Account access. The new owner will be required to protect your data in line with this Privacy Policy and UK/EU laws.


Retention time
Unless specified otherwise, Personal Data shall be processed and stored for as long as required by the purpose it has been collected for and may be retained for longer due to applicable legal obligation or based on the User’s consent.


Purposes of processing
Data is collected to allow the Owner to:

  • Provide and improve hosting and backend infrastructure

  • Optimize and distribute traffic

  • Register and authenticate Users

  • Contact Users regarding Account activity or updates

  • Enable commenting on articles

  • Handle payments via Stripe (external link)

  • Manage Profiles (upload/change profile photo)

  • Send newsletters and course announcements

  • Display content from external platforms

  • Perform analytics and infrastructure monitoring

  • Protect against fraud and misuse

For specific information about the Personal Data used for each purpose, refer to “Detailed information on the processing of Personal Data.”


Detailed information on the processing of Personal Data

  1. Analytics

    • Tools: Google Analytics, Laravel Telescope (usage data automatically collected)

  2. Contacting the User

    • Email newsletters, course updates, support messages

  3. Content commenting

    • User name, email, profile photo, comment text

  4. Handling payments

    • External Stripe link: no card data stored on this Website

  5. Hosting and backend infrastructure

    • Laravel Cloud (Frankfurt data center)

  6. Infrastructure monitoring

    • Laravel Horizon, Telescope logs

  7. Registration and authentication

    • Username, email, encrypted password

  8. Managing contacts and sending messages

    • Mailgun or SendGrid for transactional emails

  9. Traffic optimization and distribution

    • Cloudflare CDN and firewall

  10. Displaying content from external platforms

  • Embedded videos, code snippets via GitHub Gist

The Service is not directed to children under the age of 13.


Cookie Policy
This Website uses Cookies and similar tracking tools to provide its services. For more information, please consult the separate Cookie Policy available at www.tillythecoder.com/cookie-policy.


Legal basis of processing
The Owner may process Personal Data if one of the following applies:

  • User has given consent for one or more specific purposes

  • Provision of Data is necessary for the performance of a contract with the User

  • Processing is necessary for compliance with a legal obligation

  • Processing is necessary to protect the Owner’s legitimate interests (fraud prevention, site security)


Rights of Users under GDPR
Users may exercise certain rights regarding their Data:

  • Withdraw consent at any time

  • Object to processing for legitimate interests or marketing

  • Access their Data and obtain a copy

  • Verify and rectify inaccurate or incomplete Data

  • Restrict the processing of their Data

  • Erase their Data (right to be forgotten)

  • Data portability: receive Data in structured, machine‑readable format

  • Lodge a complaint with a supervisory authority

For more details on each right and how to exercise them, please contact the Owner using the details above.


How to exercise these rights
Any requests to exercise User rights can be directed to the Owner at tilly@tillythecoder.com Such requests are free of charge and will be acted upon within one month.


Additional information

  • Legal action: Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action.

  • System logs and maintenance: System logs (including IP Address) may be collected for operation and maintenance.

  • Information not contained in this policy: More details can be requested from the Owner at any time.


Changes to this Privacy Policy
The Owner reserves the right to make changes to this Privacy Policy at any time by notifying Users on this page and, where feasible, via email. It is recommended to check this page often; the date of the last modification is listed below.