Who we are

This website is operated by [Your Name / Business Name], trading as GCSE English Guides. We sell digital educational products — revision guides and GPT tools — to customers in the United Kingdom and internationally.

Our website address is: [yoursite.co.uk]

If you have any questions about this privacy policy or how we handle your data, please contact us at: [hello@yoursite.co.uk]

What data we collect and why

When you make a purchase

When you buy a product through our website, our payment processor (SureCart, powered by Stripe) collects:

• Your name and email address
• Your billing address
• Payment information (processed securely by Stripe — we never see or store your full card details)
• The products you purchased and the transaction amount

We use this information to process your order, deliver your digital products, send your receipt, and handle any refund requests. This is necessary to fulfil our contract with you.

When you join the membership

In addition to the above, membership sign-ups are processed through SureCart Subscriptions and SureMembers. We store your membership status and access level so we can deliver your monthly content and member benefits.

When you contact us

If you email us, we store your email address and the content of your message in order to respond to you. We do not add you to any mailing list on the basis of a support enquiry alone.

When you visit the website

Like most websites, we collect basic analytics data through Google Analytics, including pages visited, time on site, device type, and approximate location (country/region level only). This data is anonymised and aggregated — it does not identify you personally. We use it to understand how our site is used and to improve it.

We use cookies to make the site function correctly and to power our analytics. See the Cookie Policy for full details.

How we use your data

We use your personal data only for the following purposes:

• Processing and fulfilling your order
• Delivering your digital products and membership content
• Sending transactional emails (receipts, download links, membership access)
• Responding to support or refund requests
• Sending marketing emails if you have opted in (you can unsubscribe at any time)
• Improving our website and understanding how it is used
• Complying with our legal obligations

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Who we share your data with

We share your data only with the following trusted services, which are necessary to operate our business:

SureCart

Our payment and order management platform. SureCart processes transactions and stores your order history. SureCart’s privacy policy is available at surecart.com.

Stripe

Our payment processor. Stripe handles all card transactions securely. We never store your full card details. Stripe’s privacy policy is available at stripe.com/gb/privacy.

Mailchimp

Our email marketing platform. If you opt in to marketing emails, your name and email address are stored in Mailchimp. You can unsubscribe from any email we send. Mailchimp’s privacy policy is available at mailchimp.com/legal/privacy.

Google Analytics

We use Google Analytics to collect anonymised website usage data. Google Analytics uses cookies. You can opt out of Google Analytics tracking using the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.

Gumroad

Our GPT tools are sold through Gumroad. Purchases made on Gumroad are subject to Gumroad’s own privacy policy, available at gumroad.com/privacy.

All third-party services we use are GDPR-compliant and operate under data processing agreements where required.

How long we keep your data

• Order and transaction records: 7 years (required by UK tax law)
• Customer account data: for as long as your account is active, plus 2 years after the last purchase
• Marketing email data: until you unsubscribe
• Support correspondence: 2 years from the date of last contact
• Analytics data: 26 months (Google Analytics default)

Your rights under UK GDPR

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your data (subject to legal retention requirements)
• Right to restrict processing — you can ask us to limit how we use your data
• Right to data portability — you can request your data in a commonly used format
• Right to object — you can object to us processing your data for marketing purposes

To exercise any of these rights, email us at [hello@yoursite.co.uk]. We will respond within 30 days.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies

We use cookies on this website. For full details of which cookies we use and why, please see our Cookie Policy.

You can control cookies through your browser settings or through the cookie consent banner on our website. Disabling certain cookies may affect how the site functions.

Security

We take the security of your personal data seriously. Our website uses HTTPS encryption. Payment processing is handled entirely by Stripe, which is PCI DSS compliant. We do not store card details on our servers.

No method of internet transmission is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “last updated” date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.