Privacy Policy

OuterSpark (“we”, “us”, “our”) is the data controller for the personal data described in this policy. OuterSpark is operated by Ricky D’Costa, trading as OuterSpark and rickydcosta.com.

Address: 17 Faraday Road, Guildford, UK, GU1 1EA
Contact: r.dcosta0047@gmail.com

This policy covers spacefit.rickydcosta.com and applies equally to any other website or product operated by OuterSpark, rickydcosta.com, or a subsidiary brand in the same network.

• Quiz answers — the sliders and situational questions you answer in the free test. These aren’t linked to your identity unless you go on to purchase the full report.
• Contact details — the name and email address you provide at checkout.
• Order details — your archetype result, order number, purchase date, and amount paid.
• Payment information — handled entirely by Stripe. We never see or store your full card number, expiry date, or CVC.
• Technical data — standard web request logs (IP address, browser type, pages visited) collected by our hosting provider for security and reliability.
• Marketing engagement data — if you’re subscribed to our mailing list, our email provider records opens/clicks so we can see what content is useful.

• To deliver the report you’ve paid for and process your payment — necessary to perform our contract with you.
• To send your order confirmation, your report, and handle support or refund requests — performance of our contract with you.
• To send you marketing and communications — see “Marketing” below.
• To understand and improve the site — our legitimate interest in running a working, useful product.
• To keep financial and tax records — a legal obligation we’re subject to as a UK business.

When you purchase a full report, we add your email address to our mailing list. By doing so, you agree that OuterSpark, rickydcosta.com, and any other subsidiary brand in the same network may use your contact details to send you marketing and communications about related products, content, and services.

Because this only happens if you become a customer, and the marketing is about similar products and services, this relies on the “soft opt-in” permitted under UK direct marketing rules (PECR), rather than requiring a separate tick-box. You can opt out at any time, at no cost — every marketing email includes an unsubscribe link, or you can email r.dcosta0047@gmail.com and we’ll remove you promptly. Opting out of marketing won’t affect your ability to access a report you’ve already bought.

We use a small number of third-party processors to run the Service. They only process your data on our instructions, for the purposes below, and never for their own marketing:

• Stripe — payment processing.
• Resend — sending your order confirmation and report email.
• Beehiiv — managing our mailing list and marketing emails.
• Vercel — website hosting.
• Neon — our order database.

We don’t sell your personal data to anyone.

Some of the processors above (including Stripe, Resend, Beehiiv, and Vercel) may process data outside the UK and European Economic Area, including in the United States. Where that happens, we rely on appropriate safeguards recognised under UK GDPR, such as Standard Contractual Clauses (with the UK International Data Transfer Addendum) or the provider’s participation in a recognised data transfer framework.

The site itself doesn’t set any cookies. When you pay, you’re taken to Stripe’s own checkout page, which sets its own cookies under Stripe’s privacy policy — necessary for it to process your payment securely. If we ever turn on advertising tools (such as a Meta or Google ads pixel), those will set their own third-party cookies once active, and we’ll update this policy first.

• Order and payment records: kept for as long as required for UK accounting and tax purposes (currently up to 6 years).
• Marketing contact details: kept until you unsubscribe or ask us to delete them.
• Quiz answers not linked to a purchase: not retained beyond generating your free result.

Under UK GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• ask us to erase your data (“right to be forgotten”);
• restrict or object to certain processing, including marketing (see “Marketing” above);
• receive your data in a portable format; and
• withdraw consent at any time, where we rely on consent.

To exercise any of these, email r.dcosta0047@gmail.com. If you’re unhappy with how we’ve handled your data, you also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).

The Service isn’t directed at, or knowingly used to collect data from, anyone under 18. If you believe a minor has provided us with personal data, contact us and we’ll remove it.

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) throughout the site, restricted access to admin tools, and never handling your card details ourselves — that’s done entirely by Stripe’s PCI-compliant checkout.

We may update this policy from time to time by posting a revised version here. Material changes will update the “Last updated” date above.

Questions or requests about your data: r.dcosta0047@gmail.com.