Privacy Policy

1. Information We Collect

Personal Information. When you create an account, subscribe, contact us, or make a purchase, we may collect:

• Name
• Email address
• Billing information (handled by Stripe — see Section 3)
• Account login details
• User preferences
• Messages or support enquiries

Automatically Collected Information. When you use our website, certain information may be collected automatically, including:

• IP address
• Browser type
• Device information
• Operating system
• Pages visited
• Viewing activity
• Referring websites
• Cookies and analytics data

2. How We Use Your Information

We use collected information to:

• Provide and maintain our services
• Process subscriptions and payments
• Manage user accounts
• Improve website performance and user experience
• Respond to enquiries and support requests
• Monitor website security and prevent fraud
• Send service-related communications
• Comply with legal obligations

3. Lawful Basis for Processing (UK GDPR)

Under UK GDPR, we rely on the following lawful bases to process your personal information:

• Performance of a contract — to provide our subscription services, process payments, and manage your account
• Legitimate interests — to ensure website security, prevent fraud, and improve our services
• Consent — for any non-essential cookies or marketing communications, where required
• Legal obligation — to keep records for tax and accounting purposes

4. Payments

Payments are securely processed by Stripe. We do not store full payment card details on our servers. Payment information is handled directly by Stripe in accordance with their own privacy and security policies.

5. User Accounts and Authentication

Our website uses Supabase for account authentication, database services, and secure user management. This includes storing:

• Account information
• Login credentials (passwords are hashed and never stored in plain text)
• Subscription status
• User-generated content or preferences

6. Cookies and Local Storage

We use cookies and similar technologies (including browser local storage) to:

• Keep users logged in (essential)
• Remember preferences
• Analyse website traffic
• Improve performance and functionality

You can control cookies through your browser settings. Some features of the website (such as login) will not function correctly if cookies are disabled.

7. Third-Party Services

Our website uses or integrates with the following third-party services. Each operates independently and has its own privacy policy:

• Stripe — payment processing
• Supabase — authentication and database
• Netlify — website hosting
• Bunny.net — video streaming and content delivery
• Google Fonts — typography
• YouTube — linked external content
• TikTok — linked external content

We are not responsible for the privacy practices or content of external websites or platforms.

8. Data Retention

We retain personal information only for as long as necessary:

• Account data — for as long as your account is active. You can request deletion at any time.
• Subscription and payment records — for up to 6 years after your last transaction, to comply with UK tax and accounting law.
• Support enquiries — for up to 2 years after the matter is resolved.
• Server logs — typically 30 to 90 days, retained by our hosting and infrastructure providers.

9. Data Security

We implement reasonable administrative, technical, and security measures to help protect personal information against unauthorised access, disclosure, alteration, misuse, and loss. These include encrypted connections (HTTPS), secure authentication, and access controls on our database.

However, no method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Your Rights

Under UK GDPR and applicable data protection laws, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information ("right to be forgotten")
• Withdraw consent where processing is based on consent
• Restrict or object to certain types of processing
• Request a copy of your data in a portable format
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, please contact us using the details below.

11. International Data Transfers

Some of our service providers (such as Stripe and Supabase) may process data in countries outside the United Kingdom and European Economic Area, including the United States. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions to ensure your data remains protected to UK GDPR standards.

12. Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children. If we become aware that personal information has been collected from a child without appropriate parental consent, we will take steps to delete it promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page with a revised "Last Updated" date. Continued use of the website after changes are posted constitutes acceptance of the updated policy.

14. Contact Us