Effective date: 18 July 2026

Who we are. This site is operated by Altiora Limited, a company registered in Gibraltar at 5-9 Main Street, PO Box 411, Gibraltar (“we”). We are the data controller for the personal data described below. Contact: help(at)fivecardguy(dot)com

What we collect and why

1. Attribution analytics (our own, first-party).
When you arrive at this site through one of our links (for example from a YouTube video description via go.fivecardguy.com), the link itself carries a short tag in the web address (such as utm_content) that tells us which video or page you came from. We record:

  • The click on the link, together with a pseudonymised (hashed and salted, irreversibly truncated) version of your IP address and your browser’s user-agent string, used to filter out bots, de-duplicate clicks and support the signup matching described below. We never store your raw IP address, and we store nothing on your device for this.
  • Optionally, and only if you accept in the cookie banner: the pages you visit on this site.

Signup receipts. When you submit a signup form on this site, we process on our own servers your email address, the address of the page you were on, your IP address and browser information, to connect your signup to the video or link that referred you — for example when the link tag was lost on the way (some in-app browsers drop it). This technical data is deleted within 72 hours; only the resulting video-to-signup link is retained. Nothing is stored on your device for this.

We use all of the above to understand which of our videos lead people to our training and programs. We do not use third-party advertising trackers, we do not build advertising profiles, and we do not sell or share this data for marketing. Legal basis: legitimate interest (measuring which of our own videos our subscribers come from) for click logging, bot filtering and signup receipts; consent (given via the cookie banner) for page-visit tracking.

2. Email signups.
If you subscribe to a list or download a free training, we collect your email address (and the video that referred you, if known) to send you the content you asked for and related emails. You can unsubscribe at any time via the link in every email. Legal basis: consent.

3. Call bookings and purchases.
If you book a call or buy a program, we collect your name, email, booking details and payment records (amount, date, payment method). Legal basis: performance of a contract; we keep payment records as required by accounting and tax law.

Cookies

We set no analytics or tracking cookies of our own. (Until July 2026 this site used two first-party cookies, visitor_id and vid; they have been removed. If they are still present in your browser they are no longer read by anything and you can delete them.)

CookiePurposeDuration
cmplz_*Remembers your choice in the cookie banner (strictly necessary)up to 1 year

Embedded services (Calendly scheduling, Kit signup forms) may set their own cookies when you use them; see their policies. Optional page-visit tracking is only activated after you accept it in the cookie banner. You can withdraw consent at any time via the cookie settings link in the footer, or delete the cookies in your browser.

Who processes your data

We use these service providers (processors) to run the site:

  • Kit (ConvertKit, USA) — email list and signup forms.
  • Calendly (USA) — call scheduling.
  • Railway (USA) — hosting for our analytics database.

Where data is transferred outside Gibraltar/the UK/the EEA (all three providers are US-based), the transfer is protected by the providers’ standard contractual clauses and/or their certification under the EU–US / UK Data Privacy Framework.

How long we keep data

  • Signup receipts (email + pseudonymised IP + browser info): deleted within 72 hours.
  • Click and page-visit analytics: deleted or anonymised after 24 months.
  • Email signup data: kept while you are subscribed; removed after you unsubscribe (Kit retains unsubscribe records to honour your opt-out).
  • Booking and payment records: kept up to 6 years after the transaction, as required for accounting and tax purposes.

Your rights

Under the Gibraltar GDPR and the Data Protection Act 2004 you can ask us for access to, correction of, deletion of, or a copy of your personal data, and you can object to or restrict our processing (including the legitimate-interest processing described above). Email: help(at)fivecardguy(dot)com — we respond within one month. You can also complain to the Gibraltar Regulatory Authority (Information Commissioner), www.gra.gi.

Changes

We will update this page when our tracking or providers change, and revise the effective date above. 18 July 2026: removed our first-party cookies; attribution now runs on link tags only; added 72-hour signup receipts.

Scroll to Top