Privacy Policy

Last Updated: November 1, 2026

This Privacy Policy explains how Mindset Publishing LLC ("we," "us," or "our") collects, uses, shares, and protects personal information when you visit nolansteele.com (the "Site"), buy Banned Blueprint, or contact us (together, the "Services"). "You" means the person using the Services. We are the business responsible for your information.

The short version: we collect what we need to take your order, deliver your book, send you email you ask for, and run and measure our ads. We do not sell your information for money. We do use advertising cookies and pixels (such as Meta's), which US state laws treat as "sharing" or "targeted advertising." You can opt out at any time (see "Your Privacy Choices" below).

1. Information We Collect

Information you give us.

Contact details: name, email address, phone number (if you give it).
Order details: billing and shipping address, products ordered, order number, and payment confirmation. Card numbers are handled by our payment processors; we do not see or store your full card number.
Account details, if you create an account: login and security information.
Support and refund communications, including anything you include in the Requirement Record, Chapter 3 Verdict, or Statement you send for a refund request.
Mailing-list sign-ups and any survey or form responses.

Information collected automatically through cookies, pixels, and similar technologies: IP address, device and browser type, pages viewed, links clicked, referring site or ad, approximate location from IP, and purchase and cart activity.

Information from others: our payment processors, shipping and fulfillment partners, advertising platforms, and analytics providers.

We do not intentionally collect sensitive personal information (such as health data, precise location, or government IDs). Please do not include sensitive details in messages to us unless needed to resolve an issue. We do not use the books you buy to infer anything about your health.

2. How We Use Information

To provide the Services: process payments, fulfill and deliver orders, send order and delivery messages, give support, and handle refunds and replacements.
To communicate with you: send marketing emails about Banned Blueprint and related offers if you signed up or bought from us. Unsubscribe any time with the link in any email.
To advertise and measure: show and measure ads on platforms such as Meta (Facebook and Instagram), and build audiences of visitors or customers, including similar audiences.
To improve the Services: understand how the Site is used, fix problems, and test improvements.
Security and legal: prevent fraud and abuse, enforce our Terms, keep records, and comply with the law.

3. Who We Share Information With

Service providers (they process data for us under their agreements with us):

Shopify, which runs our store and checkout, and its payment processors, for orders, payments, fraud prevention, and customer records.
Lulu, our print-on-demand printer, which receives your name, shipping address, and (if provided) phone and email so it can print and ship the Hardcover.
BookFunnel, which receives your name and email to deliver the Ebook and Audiobook.
Klaviyo, our email marketing platform, which receives your name, email, and order and browsing activity to send emails.
Analytics, customer-support, hosting, and security providers.

Advertising partners. We use Meta pixel and conversion tools, and may use similar tools from other ad platforms. These tools can receive identifiers (such as cookie IDs, IP address, and hashed email), device information, and your activity on our Site (such as page views, add-to-cart, and purchase events) so they can show and measure our ads. Under California and other state laws this may be a "sale" or "sharing" of personal information for cross-context behavioral advertising or targeted advertising. We do not sell your information in exchange for money, and you can opt out as described below.

Others: authorities or other parties when required by law or to protect rights, safety, and property; professional advisors; and a buyer or successor if we are involved in a merger, sale, or reorganization (you will be notified of material changes).

We do not sell or share the personal information of anyone we know is under 18.

4. Cookies and Similar Technologies

We and our partners use cookies, pixels, tags, and local storage for these purposes: essential (cart, checkout, security, remembering preferences); analytics (how the Site is used); and advertising (measuring and targeting ads, including the Meta pixel). You can accept or decline non-essential cookies using the cookie banner or privacy settings on the Site where shown, or through your browser settings. Blocking some cookies may affect how the Site works. Our Site responds to the Global Privacy Control (GPC) browser signal as a request to opt out of sale and sharing for that browser. To manage ads from Meta and other advertisers, visit facebook.com/adpreferences, optout.aboutads.info, or youradchoices.com. We do not respond to "Do Not Track" browser signals other than GPC.

5. Your Privacy Choices: Do Not Sell or Share

Do Not Sell or Share My Personal Information / Targeted Advertising Opt-Out. You can opt out of the sale or sharing of your personal information and of targeted advertising by (a) using the "Your Privacy Choices" link in the Site footer or the cookie banner, (b) turning on a Global Privacy Control signal in your browser, or (c) emailing nolan@nolansteele.com with the subject "Do Not Sell or Share." We will not penalize you for opting out. You can also unsubscribe from marketing emails any time using the link at the bottom of each email.

6. Your Rights

Depending on where you live, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with similar laws, you may have the right to:

Know/Access the personal information we hold about you, and the categories of sources, purposes, and recipients.
Correct inaccurate personal information.
Delete personal information we collected from you, subject to exceptions (for example, records we must keep for tax, fraud, or legal reasons).
Portability: get a portable copy of your information.
Opt out of sale, sharing, and targeted advertising, and of profiling in furtherance of decisions with legal or similarly significant effects (we do not engage in such profiling).
Limit use of sensitive personal information (we do not collect it for purposes that require this right).
Non-discrimination: we will not deny you service, charge different prices, or give a different quality of service for using your rights.

We extend these choices to all U.S. customers who ask, whether or not your state's law requires it.

How to make a request. Email nolan@nolansteele.com with the subject "Privacy Request" and tell us what you are asking for and the email address used at purchase. We verify requests by matching the information you give with our records and may ask for more details. An authorized agent may submit a request for you with your written permission. We respond within 45 days, and may extend by another 45 days where permitted, with notice.

Appeals. If we decline your request, you may appeal by emailing us with the subject "Privacy Appeal" within a reasonable time. We respond within 45 days (60 in some states) with our decision and a written explanation. If you are not satisfied, you may contact your state attorney general.

California notice at collection (CCPA/CPRA). In the past 12 months we collected these categories: identifiers (name, email, address, IP address, online identifiers); customer records (shipping and billing details); commercial information (products purchased); internet or network activity (browsing and interaction on the Site); geolocation (approximate, from IP); and inferences drawn from the above for advertising. We collect them from you, your devices, and our service providers, for the purposes in Section 2. We disclosed identifiers, commercial information, and internet activity to the service providers listed above for business purposes, and identifiers, commercial information, and internet activity to advertising partners (such as Meta) for cross-context behavioral advertising, which California law may treat as "sharing" (and potentially a "sale"). We do not knowingly sell or share personal information of consumers under 16. We keep personal information only as long as needed for the purposes in this policy; order and tax records are generally kept up to 7 years, and marketing data until you unsubscribe or ask us to delete it.

California "Shine the Light." California residents may ask once a year about disclosures of personal information to third parties for their direct marketing; email us as above. Nevada residents may opt out of the "sale" of covered information by emailing us.

7. Information for Visitors in the EEA, UK, and Switzerland (GDPR)

Mindset Publishing LLC is the controller of your personal data. We process it under these legal bases: contract (to take and deliver your order); legitimate interests (to run, secure, and improve the Services and measure advertising, balanced against your rights); consent (for non-essential cookies and, where required, marketing emails; you may withdraw consent at any time); and legal obligation (such as tax records).

You have the right to access, correct, delete, restrict, or object to processing of your data, to data portability, to withdraw consent, and to lodge a complaint with your local data protection authority. Email us to exercise these rights.

We are based in the United States, so your data will be transferred to and processed in the U.S. and other countries where our providers operate. Where required, we rely on safeguards such as the EU Standard Contractual Clauses, the UK Addendum, or the EU-U.S. Data Privacy Framework (where a recipient participates).

8. Security and Retention

We use reasonable technical and organizational measures to protect personal information, and our payment processors are PCI-compliant. No system is perfectly secure. We keep personal information for as long as needed to provide the Services, comply with law, resolve disputes, and enforce our agreements, then delete or de-identify it.

9. Children

The Services are for adults 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us information, email us and we will delete it.

10. Third-Party Links

The Site may link to other sites. We are not responsible for their privacy practices, so review their policies.

11. Changes

We may update this policy and will post the new version here and change the "Last Updated" date. For material changes, we may also notify you by email or on the Site.

12. Contact

Mindset Publishing LLC
30 N Gould St # 63112
Sheridan, WY 82801
nolan@nolansteele.com