Privacy Policy
Last updated: 21 August 2026
This policy explains what personal data Ashworth collects, why it is collected, how long it is kept, and what rights apply to it. It is written to satisfy the Brazilian General Data Protection Law (Lei nº 13.709/2018, LGPD) and the EU General Data Protection Regulation (GDPR).
1. Controller
The controller of personal data collected through ashworth.pro is Ashworth, operating from Brazil. Contact for all privacy matters, including requests from data subjects: support@ashworth.pro.
2. Data collected
Data provided directly. Email address, and where a purchase is made, the name and billing details required by the payment provider. Ashworth does not receive or store full card numbers.
Data collected automatically. IP address, browser type and version, device type, operating system, referring page, pages visited, and timestamps. This is collected through server logs and analytics tools.
Data received from third parties. Payment confirmation and transaction status from the payment provider. Aggregate campaign measurement from advertising platforms.
Ashworth does not knowingly collect sensitive personal data as defined by Article 5, II of the LGPD or Article 9 of the GDPR, and does not ask for it.
3. Purposes and legal bases
| Purpose | Legal basis (LGPD) | Legal basis (GDPR) |
|---|---|---|
| Delivering purchased material and providing support | Execution of a contract (Art. 7, V) | Contract (Art. 6(1)(b)) |
| Sending editorial email to subscribers | Consent (Art. 7, I) | Consent (Art. 6(1)(a)) |
| Site security, fraud prevention and abuse detection | Legitimate interest (Art. 7, IX) | Legitimate interest (Art. 6(1)(f)) |
| Aggregate audience measurement | Legitimate interest (Art. 7, IX) | Legitimate interest (Art. 6(1)(f)) |
| Advertising measurement through platform pixels | Consent (Art. 7, I) | Consent (Art. 6(1)(a)) |
| Retaining transaction records | Legal obligation (Art. 7, II) | Legal obligation (Art. 6(1)(c)) |
4. Cookies and similar technologies
This site uses cookies and comparable browser storage for three purposes: keeping the site functioning, measuring audience in aggregate, and measuring the performance of advertising.
Strictly necessary cookies support basic operation and cannot be switched off through the site.
Analytics cookies record how pages are used, in aggregate.
Advertising cookies, set by third-party platforms, allow those platforms to attribute a visit to a campaign. These platforms act as independent controllers of the data they collect, under their own policies.
Browser settings can block or delete cookies. Blocking analytics or advertising cookies does not restrict access to any published material.
5. Sharing
Personal data is shared only with processors necessary to operate the publication: the payment provider, the email delivery provider, the hosting and content delivery provider, and analytics providers. Each processes data under contract and for the stated purpose only.
Data may also be disclosed where required by law, judicial order, or a lawful request from a competent authority. Personal data is never sold, rented, or traded.
6. International transfers
Ashworth operates from Brazil and uses providers located in other jurisdictions, including the United States and the European Union. Transfers of personal data out of the EEA or the United Kingdom rely on Standard Contractual Clauses or another mechanism recognised under Chapter V of the GDPR. Transfers out of Brazil follow Chapter V of the LGPD and the applicable rules issued by the Autoridade Nacional de Proteção de Dados (ANPD).
7. Retention
- Subscriber email records: retained until consent is withdrawn, then deleted within 30 days, except for a suppression record retained to prevent further contact.
- Purchase and transaction records: retained for five years from the transaction, to satisfy Brazilian civil and tax obligations.
- Support correspondence: retained for two years from the last message.
- Server logs: retained for twelve months.
8. Rights
Under Article 18 of the LGPD, data subjects may request confirmation of processing, access, correction of incomplete or outdated data, anonymisation or deletion of unnecessary data, portability, information about entities with whom data has been shared, information about the consequences of refusing consent, and withdrawal of consent.
Under Articles 15 to 22 of the GDPR, data subjects may request access, rectification, erasure, restriction of processing, portability, and may object to processing based on legitimate interest.
Requests go to support@ashworth.pro and are answered within 15 days under the LGPD and within one month under the GDPR. Verification of identity may be required before a request is actioned, and the verification data is used only for that purpose.
Complaints may be directed to the ANPD in Brazil or to the relevant supervisory authority in an EU member state or the United Kingdom.
9. Security
Transport encryption is applied across the whole site. Access to personal data is limited to those who require it to operate the publication. No system is immune to compromise; where an incident presents a risk to data subjects, notification follows Article 48 of the LGPD and Articles 33 and 34 of the GDPR.
10. Minors
This site is intended for adults aged 18 and over. It is not directed at children, and Ashworth does not knowingly collect personal data from anyone under 18. Where such data is identified, it is deleted.
11. Changes
Material changes to this policy are published on this page with a revised date. Where a change affects processing that relies on consent, fresh consent is requested.