Privacy

1. About this policy and who we are

This site is operated by Bayani Mills ("we", "us", "our"), trading as Self-Driven Recovery, located in Sydney, Australia. This policy applies to selfdrivenrecovery.com, web.selfdrivenrecovery.com, about.selfdrivenrecovery.com, and any other subdomains we operate.

If you have any questions about this policy or our handling of personal information, please use our contact form.

2. Information we collect

2.1 Information you provide directly

• Order information. When you place a hardware order, we collect your name, email address, shipping address, and any optional fulfillment notes you supply.
• Contact form submissions. When you send a message via the contact form or the bulk enquiry card, we collect the name, email address, and message contents you submit.
• Program data. The program you build is stored locally in your browser. If you choose to mint a Session ID, we receive a copy of the program and store it against an anonymous 4-character identifier so that the same program can be loaded on another device.

2.2 Information collected automatically

• Server logs. Our servers automatically record standard web access logs (IP address, request path, timestamp, user-agent string) for security and operational purposes.
• Session activity. When the display rotates an appreciation card into your session, we record a row containing the anonymous Session ID, a timestamp, and the variant shown. This allows the rotation to operate deterministically.

2.3 Information from third parties

We do not purchase, license, or otherwise acquire personal information from third parties.

3. How we use your information

We use the information we collect for the following purposes:

• To fulfil and ship orders, including providing receipts and shipping updates.
• To respond to enquiries and customer support requests.
• To operate, maintain, and improve the SDR website and display software.
• To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.
• To comply with legal obligations, including tax recordkeeping requirements.

We do not sell or rent personal information. We do not use personal information for advertising or behavioural profiling.

4. Cookies and similar technologies

The public site does not set marketing or analytics cookies. Your browser stores your in-progress program in localStorage on the SDR origin so the editor remembers it across visits; you can clear this at any time from your browser settings. The administrative console, which is not accessible to the public, uses a session cookie for authentication.

5. Sharing your information

We share information only as necessary to provide the service:

• Shipping carriers receive the recipient name and address required to deliver hardware orders.
• Payment processors. Bitcoin payments are handled by coinos.io, which has its own privacy policy. We do not receive card details, exchange-account details, or wallet seeds.
• Service providers. Web fonts are loaded from Google Fonts (fonts.googleapis.com). Google may log the request as described in its privacy policy; we do not share any of your information with Google beyond standard request headers.
• Legal compliance. We may disclose information if required to do so by law, valid legal process, or to protect the rights, property, or safety of any person.

We do not sell your personal information.

6. Data retention

• Session IDs and program data: 120 days from last access, after which they are automatically deleted.
• Hardware order records: 7 years, as required by Australian taxation recordkeeping rules.
• Contact form messages and email correspondence: retained until you ask us to delete them.
• Appreciation card fire log: retained alongside the relevant Session ID. Each row contains only the Session ID, timestamp, and variant.
• Server access logs: rotated and deleted after 30 days.

7. Data security

We use industry-standard measures to protect information, including TLS encryption for all connections to the site. Servers operate behind authenticated tunnels and only the public surfaces of the application are exposed to the internet. Backups are encrypted and held on the same premises as the primary system.

No security measure is perfect. While we take reasonable steps to protect information, we cannot guarantee absolute security.

8. Your rights and choices

Depending on where you live, you may have rights in relation to your personal information, including the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Request deletion of personal information, subject to legal exceptions (such as tax recordkeeping).
• Object to or restrict certain processing.
• Lodge a complaint with your local data protection authority.

Australian residents have rights under the Privacy Act 1988 (Cth) and may complain to the Office of the Australian Information Commissioner (oaic.gov.au).

European Economic Area, United Kingdom, and Swiss residents have rights under the GDPR / UK GDPR.

California residents have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of any sale of personal information. We do not sell personal information.

To exercise any of these rights, send a request via our contact form. We will respond within a reasonable time and in accordance with applicable law.

9. International data transfers

Our servers are located in Australia. If you access the site from outside Australia, your information will be transferred to and processed in Australia. By using the site you consent to this transfer.

10. Children's privacy

SDR is not directed at children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us without parental consent, please notify us via our contact form and we will delete the information.

11. Changes to this Privacy Policy

We may update this policy from time to time to reflect changes in our practices, services, or applicable law. The date at the top of this page indicates the last revision. We encourage you to review the policy periodically.

12. Contact us

For questions, requests, or complaints about this Privacy Policy or our handling of personal information, contact us via our contact form.

Self-Driven Recovery
Bayani Mills
Sydney, Australia