What’s in here
Calm State Co is run by one person and his husband, not a data company. We make calming books, coloring books, wallpapers and free resources for overloaded minds — and we treat your information the way we’d want ours treated: carefully, minimally, and without surprises.
1. Who we are
This website and our products are operated by Calm State Co, a sole trader business based in Australia (ABN 83 724 615 808), founded by Christopher Cox. When this policy says “we,” “us,” or “our,” that’s who we mean. We are the data controller responsible for the personal information described here.
If you have any question about your privacy, you can reach a real human at hello@calmstateco.com.
2. What we collect
We only collect what we actually need to send you something, sell you something, or answer you.
Information you give us
- Your email address (and first name, if you share it) when you sign up for a free download or our occasional emails.
- Order details when you buy a product directly — your name, email, and, for physical books, a delivery address.
- Messages you send us by email or contact form.
Information collected automatically
- Privacy-friendly, cookieless usage data — aggregate stats like which pages are visited and roughly which country traffic comes from. This does not identify you and does not follow you across other websites (see Cookies & analytics).
- Basic security logs kept by our hosting provider to keep the site online and protected.
What we don’t collect: we don’t run advertising or social-media tracking pixels, we don’t build advertising profiles about you, and we don’t ask for anything we don’t need.
Payment details: if you buy something, your card information is entered directly into our payment providers (Stripe or PayPal). We never see or store your full card number.
3. How we use your information
- To send you the free resource you asked for, and the occasional email if you opted in (you can leave any time).
- To process, deliver, and support your orders.
- To reply to your messages.
- To understand — in aggregate — what’s useful on the site, so we can make it better.
- To keep the site secure and meet our legal and tax obligations.
We will never sell, rent, or trade your personal information. Full stop.
4. Why we’re allowed to use it (legal bases)
If you’re in the UK or EU, the UK GDPR / EU GDPR asks us to name a legal basis for each use:
- Consent — for sending you marketing emails. You can withdraw it at any time.
- Contract — to fulfill an order you’ve placed.
- Legitimate interests — to keep the site secure and understand aggregate usage, balanced against your rights.
- Legal obligation — to keep tax and transaction records as required by law.
5. Who we share it with
We use a small set of trusted providers to actually run the business. They only receive what they need for their specific job, and only use it to do that job for us.
| Provider | What it does | What it may handle |
|---|---|---|
| Kit (ConvertKit) | Our email list & sending | Email, first name |
| Cloudflare | Website hosting, security & cookieless analytics | Aggregate usage, security logs |
| Neo | Our business email inbox | Emails you send us |
| Payhip | Direct checkout for digital products | Name, email, order details |
| Stripe & PayPal | Secure payment processing | Payment details (we don’t store cards) |
| BookVault | Printing & shipping physical books | Name, delivery address |
| Amazon KDP & Etsy | Marketplaces where some products are sold | Handled under their own policies |
If you buy through a marketplace like Amazon or Etsy, that platform is the one collecting your details under its privacy policy — we typically only receive limited order or payout information. We may also disclose information if the law genuinely requires it.
6. Cookies & analytics
We keep cookies to a minimum. Our website analytics are provided by Cloudflare Web Analytics, which is cookieless — it measures aggregate traffic without setting tracking cookies, without fingerprinting you, and without following you to other sites.
The only cookies you may encounter are strictly necessary ones — for example, to keep a checkout or shopping basket working, or to protect the site from abuse. We do not use advertising cookies or third-party marketing trackers. You can block or delete cookies in your browser settings at any time without breaking the parts of the site that matter.
7. International transfers
We’re based in Australia and some of our providers are in the United States, the United Kingdom, or the European Union, so your information may be processed in those places. Where information leaves your region, we rely on the provider’s appropriate safeguards — such as Standard Contractual Clauses or recognized adequacy frameworks — to keep it protected.
8. How long we keep it
- Email list: until you unsubscribe or ask us to remove you.
- Order & tax records: for as long as Australian law requires (generally five years).
- Messages: for as long as needed to help you, then cleared periodically.
9. Your rights
Depending on where you live (including under the Australian Privacy Principles, the GDPR, and California’s CCPA/CPRA), you can ask us to:
- See the personal information we hold about you;
- Correct anything that’s wrong;
- Delete your information;
- Receive a copy in a portable format;
- Withdraw consent or unsubscribe from marketing;
- Object to or limit certain uses.
Because we don’t sell personal information, there’s nothing to opt out of on that front — and we’ll never treat you differently for exercising any of these rights. Just email hello@calmstateco.com and we’ll respond within 30 days. If you’re in Australia and unhappy with our response, you can contact the Office of the Australian Information Commissioner (OAIC); in the EU/UK, your local data protection authority.
10. Children
Our products are made for adults. We don’t direct our site to children, and we don’t knowingly collect information from anyone under 16. If you believe a child has given us their information, email us and we’ll delete it.
11. Security
We use reputable providers and reasonable measures to protect your information, and we keep the data we hold small on purpose — the less we collect, the less there is to ever go wrong. That said, no method of transmission over the internet is completely secure, so we can’t promise absolute security.
12. Changes & contact
If we update this policy, we’ll change the “last updated” date at the top, and for significant changes we’ll let our email subscribers know. Questions, requests, or anything privacy-related:
Email: hello@calmstateco.com
Business: Calm State Co (ABN 83 724 615 808), Australia