This notice describes how KubitDocs Ltd handles personal data. Last updated 14 September 2026.
KubitDocs Ltd ("we", "us") is the data controller for the personal data described here. Company number 17393240, registered office Suite 9, Corum Two, Corum Office Park, Crown Way, Bristol, BS30 8FJ. Contact: hello@kubitdocs.com.
What we collect, and why
We collect as little as the transaction needs.
| Data | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Your email address | To send your order confirmation and download links, and to tell you when a document you own is revised | Performance of our contract with you |
| Your purchase record (which document, when, amount) | To provide your entitlement and future revisions, and to keep lawful accounting records | Contract; and legal obligation (tax law) |
| Technical data (IP address, timestamps) at download | To deliver the file and to detect and prevent abuse of download links | Our legitimate interest in the security of the service |
| Waitlist: your email address and the trade you chose | To email you when a document you asked for goes on sale or is revised, and to tell us which bundle to write next | Consent, which you give by submitting the form and can withdraw at any time |
| Waitlist: the country your request came from | To spot and stop automated abuse of the signup form | Our legitimate interest in the security of the service |
| Only if you accept advertising cookies: which of our Google or Facebook adverts brought you to the site and, for a purchase, the order value and Paddle transaction reference | To see which of our adverts lead to visits and sales | Consent, which you can withdraw at any time in Cookie settings |
We do not collect card or payment details. Payment is handled by our payment provider (see below), who is the merchant of record; we never see or store your card information.
We do not sell your data. If you accept advertising cookies, the Google Ads tag and the Meta Pixel tell Google and Meta which of our adverts brought you here and, if you buy, the order value and transaction reference, so we can see which adverts work. If you reject them, or make no choice, neither loads and nothing is sent. The revision emails are part of the product you bought — you keep getting the current version — not marketing.
The waitlist is the one thing we collect before you buy anything. It is an email address and a trade, and nothing else — no name, no company, no phone number, and no tracking of what you looked at. We use it to tell you when a document you asked for lands or is revised, and every message tells you how to come off the list — reply to it, or email hello@kubitdocs.com. Ask us at hello@kubitdocs.com and we will remove you the same day.
Who processes your data for us
We use a small number of processors, each under a data-processing agreement:
- Cloudflare — hosts the website and stores order and entitlement records and the document files. Global infrastructure.
- Paddle — our payment provider and merchant of record. Paddle takes the payment, handles card data and calculates and remits any VAT. Paddle is a separate controller for the payment data it processes; see Paddle's own privacy notice.
- Microsoft 365 — hosts our email (hello@kubitdocs.com). Order, download and revision emails are sent from hello@kubitdocs.com through Microsoft 365, which hosts our email.
Some of these providers process data outside the UK. Where they do, the transfer is covered by appropriate safeguards (UK International Data Transfer Agreement or equivalent standard contractual clauses).
Google and Meta are not our processors. Only if you accept advertising cookies do they receive the advert and purchase information described above, through the Google Ads tag and the Meta Pixel; their own privacy policies explain how they use it. You can change your choice at any time with Cookie settings at the bottom of every page.
How long we keep it
- Order and accounting records: 6 years, as UK tax law requires.
- Your entitlement (email + which documents you own): for as long as we offer the free-revisions promise on that document, so we can honour it.
- Download logs: a rolling short period for security, then deleted.
- Waitlist entries: until you unsubscribe or ask us to remove you, or until 24 months after signup with no response from you, whichever is sooner.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected, to have it erased (where we are not required to keep it, e.g. tax records), to restrict or object to processing, and to data portability. To exercise any of these, email hello@kubitdocs.com.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would ask you to contact us first so we can put things right.
Cookies
See our Cookie Policy.
Changes
We will post any changes to this notice on this page.