Privacy Policy
What data is collected
When you make a purchase
Purchases are processed by third-party payment platforms (currently Lemon Squeezy or Gumroad). These platforms collect and process your payment and order details — including your name, email address, and billing information — under their own privacy policies. Only your email address and order details are passed on to confirm and fulfil your purchase.
When you sign up to the mailing list
If you subscribe to updates or announcements, your email address is stored and used to send you those communications. You can unsubscribe at any time using the link in any email.
When you visit this website
This website uses self-hosted analytics to understand how visitors use the site. No data is sent to third-party analytics services. The analytics collect basic information such as page views, referral sources, and general location (country-level). No cookies are set for analytics purposes, and no personal identifiers are tracked.
How your data is used
Data collected through this website is used only to:
- Fulfil and manage product purchases
- Send communications you have opted into
- Understand how the website is being used, in aggregate
Your data is never sold, rented, or shared with third parties for marketing purposes.
Legal basis for processing (UK GDPR)
- Contract performance — processing your order and delivering your purchase
- Legitimate interests — understanding website usage through privacy-respecting analytics
- Consent — sending marketing emails where you have opted in
Data retention
- Purchase records are retained as required for legal and accounting obligations (typically 6 years in the UK)
- Mailing list data is held until you unsubscribe
- Analytics data is aggregate and not tied to individuals
Third-party services
The following third-party services may process your data as part of a purchase:
- Lemon Squeezy — lemonsqueezy.com/privacy
- Gumroad — gumroad.com/privacy
This website does not embed third-party tracking scripts, advertising pixels, or social media widgets.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data held about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict how your data is processed
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, contact [email protected].
You also have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO), at ico.org.uk.
Changes to this policy
This policy may be updated from time to time. The date at the top of this page will reflect the most recent revision. Continued use of the website after any changes constitutes acceptance of the updated policy.