Privacy Policy

Last updated: 6 August 2026

1. Who is responsible for your data

2. What we collect

When you buy the book

• Email address — so we can deliver the book and contact you about your order.
• Order details — what you bought, the amount, the date, and the transaction reference.
• Billing country and partial card details — such as the card type and last four digits, as recorded by Stripe.

We never receive your full card number, expiry date or security code. Those go directly to Stripe and are never held by us or by this website.

When you visit the site

This site is a single static page. It sets no advertising cookies and runs no third-party analytics or tracking pixels.

Two things do store data on your own device, both entirely local to your browser and never transmitted to us:

• A promotional countdown timer.
• A visitor counter and notification display.

Our hosting provider, Vercel, keeps standard server logs of requests — including IP address, browser type and page requested — for security and operational purposes.

3. Why we use it, and our lawful basis

• To deliver the book and support your order — necessary to perform the contract you entered into.
• To keep records of sales, refunds and consents — necessary to comply with tax, accounting and consumer-law obligations.
• To resolve disputes and respond to chargebacks — our legitimate interest in defending against claims.
• To keep the site running and secure — our legitimate interest in operating the service.

We do not send marketing email unless you have separately and explicitly asked us to.

4. Who else processes your data

• Stripe — payment processing. Stripe is the controller of its own payment data and operates under its own privacy policy.
• Vercel — website hosting and server logs.
• Google Fonts — the page loads a font file from Google's servers, which involves your browser making a request to them.
• Our email provider — used to send you the book.

We do not sell, rent or trade your personal data. We do not share it for anyone else's marketing.

5. International transfers

Some of these providers operate outside the UK and the EEA, including in the United States. Where data is transferred internationally, it is done under the safeguards those providers have in place, such as standard contractual clauses.

6. How long we keep it

• Order and transaction records — retained for as long as tax and accounting law requires, typically six years.
• Support correspondence — kept while needed to support your purchase, then deleted.
• Server logs — kept for the short period set by our hosting provider.

7. Your rights

Depending on where you live, you may have the right to:

• Ask what personal data we hold about you, and get a copy;
• Have inaccurate data corrected;
• Ask us to delete data, where we are not legally required to keep it;
• Object to or restrict certain processing;
• Receive your data in a portable format; and
• Complain to your data protection regulator. In the UK that is the Information Commissioner's Office.

To exercise any of these, reply to your Stripe receipt or use the support contact details shown on it. Note that we may need to keep your order record even after a deletion request, where tax law requires it.

8. Children

This book is sold to adults. The site is not directed at children and we do not knowingly collect data from them.

9. Changes

If this policy changes, the date at the top of the page will be updated.