Privacy Policy

100kadchallenge (“we”, “us”) is an online education business operated by Noah Hunter Dorsey in Melbourne, Australia. We run the 100K Ad Challenge and related programs at www.100kadchallenge.com.

We are the data controller for the information described here. You can reach us any time at noah@100kadchallenge.com.

We only collect what we need to run the program and the ads that sell it.

• Information you give us. Your name, email address and (optionally) phone number when you register, join the waitlist, or buy. If you fill in the onboarding questions in the member portal, we store your answers (your brand, product and goals) so we can tailor the sessions.
• Purchase information. Payments are processed by Stripe. We receive the amount, currency, product, and a Stripe customer/session ID, plus the billing name, email and country Stripe returns to us. We never see or store your full card number — that stays with Stripe.
• Account & access information. One-time login codes sent to your email, a signed session cookie for the member portal, and a record of when you logged in.
• Usage information. Aggregated page-view counts per page and per day, which emails we sent you and whether they were opened or clicked, and whether you clicked through to our WhatsApp community.
• Device & advertising data. When you visit the site, our advertising tools may collect your IP address, browser user agent, referring URL and cookie identifiers (including Meta’s _fbp and _fbc cookies).

We do not collect sensitive information (health, biometric, racial or ethnic origin, political or religious beliefs), and we do not ask you to upload files.

• To deliver what you signed up for — session links, joining details and access to the member portal.
• To take payment, issue receipts and handle refunds.
• To send you emails about the challenge and our related programs. Every marketing email has a one-click unsubscribe link, and unsubscribing is honoured immediately.
• To measure and improve our advertising — which ads, pages and emails lead to registrations and purchases.
• To keep the site secure, prevent abuse, and meet our tax and legal obligations.

Where we rely on consent (marketing email, advertising cookies) you can withdraw it at any time. Otherwise we rely on performing our contract with you and our legitimate interest in running and measuring the business.

We advertise on Meta platforms (Facebook and Instagram). To do that we use the Meta pixel on our site and the Meta Conversions API on our server. Together they tell Meta when someone views a page, starts checkout or completes a purchase, so we can measure which ads work and show ads to relevant audiences.

For purchase events we send Meta a hashed (irreversible) version of your email address and phone number, along with the event value, your IP address, browser user agent and Meta cookie identifiers. Meta uses this to match the event to an ad. Meta acts as an independent controller of the data it receives; their handling is governed by the Meta Privacy Policy.

You can limit this through your Meta ad preferences, or by blocking third-party cookies in your browser. Our own site uses only essential cookies (your portal session) plus the advertising cookies described above — we do not sell your personal information.

We don’t sell or rent your data. We share it only with the service providers we need to run the business, each bound to protect it:

• Stripe — payment processing.
• Supabase — our database (hosted in Australia).
• Resend — transactional and marketing email delivery.
• Vercel — website and application hosting.
• Meta Platforms — advertising measurement, as described above.
• Zoom — the live sessions. If you join a call, Zoom collects your display name and connection data under its own policy. Sessions may be recorded and shared with other participants as replays.
• WhatsApp — our student community. Joining is optional; if you join, other members can see your WhatsApp display name and number.

We may also disclose information if the law requires it, or to protect our rights, users or systems.

Our database is hosted in Australia. Some of our providers (Stripe, Resend, Vercel, Meta, Zoom) process data in the United States and elsewhere. Where personal information leaves your country, we rely on our providers’ standard contractual clauses and equivalent safeguards.

We keep customer records for as long as you have access to a program, and afterwards for as long as we need them for tax, accounting and legal purposes — generally seven years for purchase records under Australian law. Marketing contacts who never buy are kept until they unsubscribe or ask to be deleted. Aggregated page-view counts contain no personal information and are kept indefinitely.

You can ask us to give you a copy of your data, correct it, delete it, or stop using it for marketing. Email noah@100kadchallenge.com and we’ll respond within 30 days.

If you’re in the EU or UK, you also have the right to object to processing, to data portability, and to complain to your local supervisory authority. In Australia, you can complain to the Office of the Australian Information Commissioner.

To have your personal information deleted, email noah@100kadchallenge.com with the subject line “Data deletion request” from the email address you signed up with. We’ll confirm your identity, then erase your record — registration, email history, portal login and onboarding answers — within 30 days and confirm by email.

Two things we can’t erase: payment records Stripe and our accountants are legally required to retain, and a minimal record of your email address on our suppression list, kept solely so we never email you again. If you signed up through Facebook or Instagram, deleting your data with us does not delete data held by Meta — use Meta’s own tools for that.

Our programs are for business owners and are not directed at anyone under 18. We don’t knowingly collect information from children. If you believe a child has given us their information, email us and we’ll delete it.

Data is encrypted in transit, stored in a database with row-level security that no public client can read, and our admin tools are password-protected. No system is perfect — if we ever have a breach that puts you at risk, we’ll notify you and the relevant regulator as the law requires.

If we change how we handle your data, we’ll update this page and change the “last updated” date above. Material changes affecting existing customers will also be emailed.

Questions about this policy or your data: noah@100kadchallenge.com
100kadchallenge · Melbourne, Victoria, Australia