Draft – check before publishing. This is a starting draft, not legal advice. Fill in the highlighted placeholders and have it checked.
Privacy policy
Last updated: [date]
Fig & Flax is a trading name of Nicholas Collinson, a sole trader based in the UK (“we”, “us”, “our”). We are the “controller” of the personal data described here. Contact: Nicholas.collinson@me.com. Postal address: TBC before launch
[Check whether you need to pay the ICO data protection fee and, if so, add your ICO registration number here: ico.org.uk/fee]
What we collect and why
- Free e-book sign-up: your email address and (optionally) first name, so we can send you the free book. Lawful basis: to provide what you asked for (contract / steps at your request).
- Marketing emails: only if you tick the box to say yes. Lawful basis: your consent. You can withdraw it at any time with the unsubscribe link in every email or by emailing us.
- Purchases: when you buy, our checkout provider Payhip collects your name, email, country and payment details. We receive your name, email, country and what you bought – never your full card details. Lawful basis: to perform our contract with you, and to meet legal obligations such as tax and accounting records.
- Customers and email: if you buy from us and didn't opt out at checkout, we may email you about similar Fig & Flax products (the “soft opt-in”). You can opt out at any time.
- Emails you send us: your message and contact details, to reply. Lawful basis: our legitimate interest in answering your query.
Who we share it with
We use trusted service providers who process data on our behalf:
- Payhip (online store, checkout and file delivery), with Stripe and PayPal (payment processing)
- [Email provider – e.g. Kit or MailerLite] (sending the free book and emails)
- [Web host – e.g. Cloudflare Pages] (hosting this website)
Some of these providers are based in or transfer data to the US or other countries outside the UK. Where they do, they rely on safeguards recognised under UK law, such as the UK-US Data Bridge or the UK International Data Transfer Addendum. We never sell your data.
How long we keep it
- Email list: until you unsubscribe, then a suppression record so we don't email you again.
- Order records: [6 years] for tax and accounting purposes.
- Emails to us: up to [2 years] unless needed longer to deal with an issue.
Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to how we use it, data portability, and to withdraw consent at any time. Email Nicholas.collinson@me.com and we'll respond within one month. If you're unhappy, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Cookies
See our cookie notice.