Privacy Policy — The Tom Nash Private Report
Legal Document

Privacy Policy

Last Updated: March 2026

This Privacy Policy describes how Tom Nash ("we," "us," or "our") collects, uses, stores, and protects your personal information when you visit our website, subscribe to our service, or interact with us in any way. By using our website or subscribing to the Service, you consent to the practices described in this policy.

We are committed to protecting your privacy and handling your data responsibly in compliance with applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, the European Union's General Data Protection Regulation (GDPR).

Section 01

Information We Collect

1.1 Information You Provide Directly

When you subscribe to or interact with the Service, we may collect:

  • Account information: Name, email address, and password when you create an account
  • Payment information: Credit card or payment details processed securely through our third-party payment processor (Stripe). We do not store your full credit card number on our servers.
  • Communication data: Any information you provide when you contact our support team, participate in community discussions, or submit feedback
  • Survey or feedback responses: If you voluntarily participate in surveys or provide feedback

1.2 Information Collected Automatically

When you visit our website or use the Service, we may automatically collect:

  • Device information: Browser type, operating system, device type
  • Usage data: Pages visited, time spent on pages, click patterns, referring URLs
  • IP address: Used for security, fraud prevention, and general geographic analytics
  • Cookies and similar technologies: See Section 5 for details

1.3 Information from Third Parties

We may receive limited information from third-party services we use, such as:

  • Payment confirmation and subscription status from Stripe
  • Email engagement data (opens, clicks) from our email service provider
Section 02

How We Use Your Information

We use your personal information for the following purposes:

  • Delivering the Service: Providing access to content, managing your subscription, and delivering briefings and updates
  • Processing payments: Charging subscription fees and managing billing through Stripe
  • Communication: Sending you service-related emails including subscription confirmations, billing receipts, content notifications, and important updates about the Service
  • Marketing emails: Sending promotional content, product announcements, and newsletters. You can opt out of marketing emails at any time (see Section 6).
  • Improving the Service: Analyzing usage patterns to improve content, user experience, and platform functionality
  • Security and fraud prevention: Detecting and preventing unauthorized access, fraud, and other harmful activity
  • Legal compliance: Fulfilling legal obligations and responding to lawful requests from authorities
Section 03

How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We may share your information only in the following circumstances:

3.1 Service Providers

We share your information with trusted third-party service providers who assist in operating the Service, including:

Stripe
Payment processing
https://stripe.com/privacy
Kit (ConvertKit)
Email marketing and communication
https://kit.com/privacy
Circle
Members-only community and content delivery platform
https://circle.so/privacy

These providers only have access to the information necessary to perform their specific functions and are contractually obligated to protect your data.

3.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to:

  • Comply with a legal obligation
  • Protect and defend our rights or property
  • Prevent fraud or illegal activity
  • Protect the safety of subscribers or the public

3.3 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our business, your personal information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

Section 04

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After you cancel your subscription, we will retain your data for a reasonable period to:

  • Comply with legal and accounting obligations
  • Resolve disputes
  • Enforce our agreements

You may request deletion of your data at any time (see Section 6).

Section 05

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

  • Keep you logged in to your account
  • Remember your preferences
  • Analyze website traffic and usage patterns
  • Improve your experience on our site

Types of Cookies We Use

  • Essential cookies: Required for the website to function properly (login, security, payment processing)
  • Analytics cookies: Help us understand how visitors interact with our website (e.g., Google Analytics)
  • Marketing cookies: Used to track the effectiveness of our advertising and marketing campaigns

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, blocking essential cookies may prevent you from accessing certain features of the Service.

Section 06

Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

6.1 Access and Portability

You have the right to request a copy of the personal information we hold about you in a commonly used, machine-readable format.

6.2 Correction

You have the right to request correction of any inaccurate or incomplete personal information we hold about you.

6.3 Deletion

You have the right to request deletion of your personal information, subject to certain legal exceptions (e.g., information we are required to retain for legal or accounting purposes).

6.4 Opt-Out of Marketing

You may opt out of receiving marketing emails at any time by:

  • Clicking the "unsubscribe" link in any marketing email
  • Contacting us at support@tomnash.academy

Please note that even if you opt out of marketing emails, we may still send you service-related communications (billing receipts, subscription updates, important service announcements).

6.5 Withdraw Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before the withdrawal.

Exercising Your Rights: To exercise any of these rights, please contact us at support@tomnash.academy. We will respond to your request within 30 days.

Section 07

Data Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit (SSL/TLS)
  • Secure payment processing through Stripe (PCI-DSS compliant)
  • Access controls limiting who can view personal information
  • Regular review of our data collection, storage, and processing practices

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Section 08

International Data Transfers

Our Service is operated from Canada. If you are accessing the Service from outside Canada, please be aware that your information may be transferred to, stored, and processed in Canada. By using the Service, you consent to the transfer of your information to Canada and acknowledge that your data may be subject to Canadian privacy laws.

For subscribers in the European Economic Area (EEA), we will take appropriate steps to ensure that transfers of personal information are in accordance with applicable law, including the GDPR.

Section 09

Children's Privacy

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we have collected information from a child under 16, please contact us immediately at support@tomnash.academy.

Section 10

Third-Party Links

The Service may contain links to third-party websites, platforms, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

Section 11

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on our website with a revised "Last Updated" date. We encourage you to review this page periodically.

If we make material changes that affect how we handle your personal information, we will notify you by email or through a prominent notice on our website.

Section 12

Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise your rights, please contact us at:

By using The Tom Nash Private Report website or subscribing to the Service, you acknowledge that you have read, understood, and agree to this Privacy Policy.