Privacy Policy

This policy explains what personal data Verity Education (“we”, “us”) collects when you use verityeducation.co.uk, why, and what rights you have over it. We are the data controller for the information described here, under UK data protection law (UK GDPR and the Data Protection Act 2018).

1. What we collect

• Account information: your email address and, if you give it, a display name.
• Order history: which products you’ve bought, order dates and amounts.
• Payment information: handled entirely by Stripe, our payment processor. We do not receive, see or store your full card number, expiry date or security code — only confirmation that a payment succeeded or failed.
• Technical information: standard server logs (IP address, browser type, pages visited) generated automatically by running the Site, used only for security and troubleshooting.

We do not currently use analytics or marketing cookies. If that changes, this policy and the Site will be updated to ask for your consent first, as required by UK law.

2. Why we collect it

• To create and manage your account.
• To process your purchases and give you access to what you’ve bought.
• To send order receipts and download-ready notifications.
• To respond to support queries you send us.
• To meet our own legal obligations (for example, keeping transaction records for tax purposes).

We do not sell your data, and we do not use it for advertising.

3. Who we share it with

We use a small number of specialist providers to run the Site. Each only receives the data it needs to do its job, and each is contractually required to protect it:

• Stripe — payment processing.
• Supabase — hosts our database and handles account sign-in.
• Resend — sends transactional emails (receipts, download links).
• Vercel — hosts the website itself.

Some of these providers may process data on servers outside the UK. Where that happens, it is covered by their own standard contractual safeguards for international data transfers. We do not share your data with anyone else, and never for marketing purposes without your separate consent.

4. How long we keep it

We keep account and order data for as long as your account is active, and for a reasonable period afterwards to meet our legal and tax record-keeping obligations (typically up to 6 years for financial records). You can ask us to delete your account at any time, subject to those legal retention requirements.

5. Your rights

Under UK GDPR, you have the right to:

• ask what personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data (subject to our legal retention obligations, above);
• object to or restrict certain uses of your data; and
• ask for a copy of your data in a portable format.

To exercise any of these, contact us using the details below. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO), if you believe we have mishandled your data.

6. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) and access controls on our database. No online service can guarantee perfect security, but we take reasonable steps to keep your information safe.

7. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top will always reflect the current version.

8. Contact

For any privacy question or to exercise your rights, contact us at afgscarlett@gmail.com.