Privacy Notice

1. Who we are (Responsible Party)

This site is operated by Pashkiran Reddy (trading as The Road to Kali), based in South Africa. For the purposes of POPIA we are the Responsible Party; for GDPR, the data controller.

Information Officer: Pashkiran Reddy — pashi@scholrs.com or via our contact form.

2. What we collect and why

• Order details (your name, email, and the transaction reference Paddle assigns to your purchase) — to fulfil your order, deliver your download link, provide customer support, and comply with our record-keeping obligations.
• Newsletter signups (email address) — to send you launch news and occasional updates about the book, on the basis of your consent.
• Comments and reactions (display name, comment text, reaction) — published publicly on the article you post on.
• Communications (support emails you send us) — to answer your questions.
• Technical data (IP address, browser type, and basic usage telemetry) — to keep the site secure, prevent fraud, and improve performance.

Payment card and billing address details are collected directly by our payment provider Paddle at checkout — we never see or store card numbers.

3. Lawful basis for processing

Under POPIA section 11 and the equivalent GDPR Article 6 grounds, we process your personal information on the following bases:

• Contract — to fulfil your order and deliver the book / soundtrack.
• Consent — for newsletter signups and public comments.
• Legal obligation — tax and accounting record-keeping.
• Legitimate interest — running a secure site, preventing fraud and abuse.

4. Who we share it with (Operators)

• Paddle — our Merchant of Record. Paddle handles payment, billing, tax compliance, invoicing, refunds and buyer support. See Paddle's Privacy Policy.
• Hosting and infrastructure providers — for site hosting, database, storage of the Book file, and email delivery.
• Professional advisers (accountants, lawyers) — only when needed.
• Authorities — where required to comply with law.

These parties act as our Operators under POPIA and are bound by written agreements to process your data only on our instructions and to keep it secure. We do not sell your personal information and we do not use it for third-party advertising.

5. International transfers (POPIA s.72)

Because Paddle and our hosting providers operate globally, your personal information may be processed outside South Africa. In line with POPIA section 72, we only transfer data to recipients that are subject to laws, binding corporate rules or agreements that provide an adequate level of protection substantially similar to POPIA — or where you have consented, or the transfer is necessary to perform your contract with us.

6. How long we keep it

We keep order records for as long as required by tax and accounting law (typically 5–7 years). Download links expire 30 days after purchase. Newsletter records are kept until you unsubscribe. Comments remain published unless you ask us to delete them. Support correspondence is kept for as long as reasonably needed to help you, then deleted or anonymised.

7. Your rights (POPIA s.23–25 / GDPR)

You have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of your personal information.
• Object to processing, and withdraw consent for newsletter or marketing at any time.
• Lodge a complaint with the Information Regulator (see below).

To exercise any of these rights, email pashi@scholrs.com or use our contact form. We respond within a reasonable time and at no charge for a first request.

8. Security

In line with POPIA section 19 we use industry-standard technical and organisational measures — TLS in transit, encrypted storage, access controls, private storage for the Book file, and signed download links that expire quickly — to protect your personal information.

9. Security breaches (POPIA s.22)

Where we have reasonable grounds to believe that your personal information has been accessed or acquired by an unauthorised person, we will notify the Information Regulator and affected users as soon as reasonably possible, with the information required by POPIA section 22.

10. Direct marketing (POPIA s.69)

We only send newsletter or promotional emails to people who have actively opted in via the signup form on this site. Every email includes a one-click unsubscribe link, and you can also unsubscribe here. We do not share your email address with third parties for their marketing.

11. Cookies

This site uses only strictly-necessary cookies and local storage required for the checkout, session and preferences to function. We don't run advertising or third-party analytics cookies.

12. Children

This site is not directed at children under 18 and we do not knowingly collect personal information from them. If you believe a minor has provided us with personal information, please contact us and we will delete it.

13. Changes

We may update this notice from time to time. Material changes will be reflected in the "Last updated" date above.