Privacy Policy
This notice explains what personal data we collect when you use this shop, why, and what your rights are under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
The data controller is [Company details not set. Add them in the admin panel under Site content before launch.]. You can reach us at our contact form.
What we collect and why
| Data | Why we use it | Lawful basis |
|---|---|---|
| Email address | To create your account, send your order confirmation and sign-in links | Contract |
| Order details (what you bought, when, amount) | To give you access to your guides and keep tax records | Contract, legal obligation |
| The time you agreed to immediate access at checkout | To show that you asked for immediate supply of digital content | Legal obligation |
| Access log (time, IP address, browser) when you open or download a guide | To prevent misuse and resolve delivery problems | Legitimate interests |
| Reviews you write and the name you choose to show | To publish your review on the product page | Consent (you can delete it) |
| Messages you send us | To reply to you | Legitimate interests |
We do not receive or store your card details. Payments are processed by Stripe.
Who we share data with
- Stripe, to take payment and prevent fraud
- Supabase, which hosts our database, sign-in system and files
- Resend, which sends our emails
- Vercel, which hosts this website
These providers act on our instructions. Some process data outside the UK. Where they do, transfers are covered by UK adequacy regulations or the UK International Data Transfer Addendum.
How long we keep it
- Order records: six years after the end of the tax year, as tax law requires
- Your account and access to your guides: until you ask us to delete it
- Access logs: 12 months
- Contact messages: 12 months after we last replied
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to move it elsewhere. Contact us to do any of these. We reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
See our Cookie Policy.