Privacy Policy

This policy explains what personal data Verity Education (“we”, “us”) collects when you use verityeducation.co.uk, why, and what rights you have over it. We are the data controller for the information described here, under UK data protection law (UK GDPR and the Data Protection Act 2018).

1. What we collect

• Account information: your email address and, if you give it, a display name.
• Order history: which products you’ve bought, order dates and amounts.
• Payment information: handled entirely by Stripe, our payment processor. We do not receive, see or store your full card number, expiry date or security code — only confirmation that a payment succeeded or failed.
• Technical information: standard server logs (IP address, browser type, pages visited) generated automatically by running the Site, used only for security and troubleshooting.

• Optional analytics (with your consent only): if you accept the cookie banner, we use Google Analytics to understand which pages and resources are most useful to teachers. If you decline, no analytics cookie is set and the Site works exactly the same. You can change your mind by clearing this site’s data in your browser.
• Optional email updates (with your consent only): if you tick the box asking to hear about new free resources and teaching guides, we keep your email address on that list until you unsubscribe, which you can do at any time.

We never use advertising or tracking cookies, and both of the above are strictly opt-in.

2. Why we collect it

• To create and manage your account.
• To process your purchases and give you access to what you’ve bought.
• To send order receipts and download-ready notifications.
• To respond to support queries you send us.
• To meet our own legal obligations (for example, keeping transaction records for tax purposes).

We do not sell your data, and we do not use it for advertising.

3. Who we share it with

We use a small number of specialist providers to run the Site. Each only receives the data it needs to do its job, and each is contractually required to protect it:

• Stripe — payment processing.
• Supabase — hosts our database and handles account sign-in.
• Resend — sends transactional emails (receipts, download links).
• Vercel — hosts the website itself.
• Google Analytics — optional usage statistics, only ever loaded if you accept the cookie banner.

Some of these providers may process data on servers outside the UK. Where that happens, it is covered by their own standard contractual safeguards for international data transfers. We do not share your data with anyone else, and never for marketing purposes without your separate consent.

4. How long we keep it

We keep account and order data for as long as your account is active, and for a reasonable period afterwards to meet our legal and tax record-keeping obligations (typically up to 6 years for financial records). You can ask us to delete your account at any time, subject to those legal retention requirements.

5. Your rights

Under UK GDPR, you have the right to:

• ask what personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data (subject to our legal retention obligations, above);
• object to or restrict certain uses of your data; and
• ask for a copy of your data in a portable format.

To exercise any of these, contact us using the details below. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), if you believe we have mishandled your data.

6. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and access controls on our database. No online service can guarantee perfect security, but we take reasonable steps to keep your information safe.

7. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top will always reflect the current version.

8. Contact

For any privacy question or to exercise your rights, contact us at adrian@verityeducation.co.uk.