Privacy Policy
How we collect, use, store, and protect your personal data, written in plain English.
This Privacy Policy explains how we collect, use, store, and protect your personal data. It is written in plain English to ensure it is easy to understand. Please read it carefully before using this website.
Contents
1. Who Is Responsible for Your Data?
The data controller responsible for your personal information is:
For UK visitors, we are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Data We Collect
2.1 Data You Provide Directly
- Name and email address (when you subscribe to our newsletter or contact us)
- Your message content (when you submit a contact form)
- Payment information (processed securely by third-party payment providers — we do not store card details)
2.2 Data Collected Automatically
- IP address and approximate location
- Browser type and version
- Operating system and device type (desktop, mobile, tablet)
- Pages visited, time spent on each page, and navigation paths
- Referral source (how you arrived at our website)
- Cookies and similar tracking technologies (see Section 7)
3. How We Use Your Data
We process your personal data on the following lawful bases under UK GDPR:
3.1 Legitimate Interests (Article 6(1)(f))
- To analyse website traffic and improve content quality
- To detect and prevent fraud, spam, and abuse
- To understand which content and products resonate with our audience
3.2 Consent (Article 6(1)(a))
- To send you marketing emails and newsletters (you may withdraw consent at any time)
- To place non-essential cookies on your device
3.3 Contract Performance (Article 6(1)(b))
- To respond to enquiries and provide support
- To process orders where applicable
4. Sharing Your Data
We do not sell, rent, or trade your personal data. We may share it with trusted third parties only where necessary:
4.1 Service Providers
- Email marketing platforms (e.g. Mailchimp, ConvertKit) — to send newsletters
- Analytics providers (e.g. Google Analytics, Fathom) — to understand website performance
- Hosting providers — to serve this website
- Comment management tools (e.g. Disqus) — if applicable
4.2 Affiliate Networks
When you click an affiliate link, the merchant or affiliate network may set cookies or collect data about your visit. Their privacy policies govern how they use that data. We are not responsible for third-party privacy practices.
4.3 Legal Requirements
We may disclose your data to comply with a legal obligation, court order, or to protect the rights and safety of ourselves or others.
5. International Transfers
Some of our third-party service providers are based outside the UK and European Economic Area (EEA). Where data is transferred internationally, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs) approved by the UK ICO
- Transfers to countries with an adequacy decision
- Binding Corporate Rules (BCRs) where applicable
6. Data Retention
We retain your data only for as long as necessary for the purpose it was collected:
- Newsletter subscriber data: Until you unsubscribe or request deletion
- Contact form submissions: Up to 12 months
- Analytics data: Up to 26 months (as per Google Analytics default settings)
- Server logs: Up to 90 days
7. Cookies
7.1 What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to website owners.
7.2 Types of Cookies We Use
- Strictly Necessary Cookies — Required for the website to function. Cannot be disabled.
- Analytics Cookies — Help us understand how visitors interact with our website (e.g. Google Analytics). Set only with your consent.
- Functional Cookies — Remember your preferences (e.g. language, region).
- Affiliate / Tracking Cookies — Placed by affiliate networks to attribute sales. Set when you click an affiliate link.
- Marketing Cookies — Used to deliver relevant advertisements (if applicable).
7.3 Managing Cookies
When you first visit our website, you will be presented with a cookie consent banner. You can accept all, reject non-essential cookies, or manage your preferences. You may also manage cookies through your browser settings. Note that disabling cookies may affect website functionality.
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data in certain circumstances ("Right to be Forgotten").
Request that we limit how we use your data.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or for direct marketing.
To exercise any of these rights, please contact us at rajesh@example.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
9. Children's Privacy
This website is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.
10. Security
We implement appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, or destruction. These include SSL/TLS encryption, secure hosting, and access controls. However, no method of transmission over the internet is completely secure.
11. Third-Party Links
This website contains links to third-party websites, including affiliate merchant sites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via a notice on our website. The "Last Updated" date at the top of this page will always reflect the most recent version.
Questions about this policy? Contact us at rajesh@example.com — we aim to respond within 30 days.