Privacy Notice
Draft, pending legal review. This notice describes how KubitDocs Ltd handles personal data. It will be finalised, with the company number and registered office completed, before the shop opens.
KubitDocs Ltd ("we", "us") is the data controller for the personal data described here. Company number [COMPANY NUMBER], registered office Suite 9, Corum Two, Corum Office Park, Crown Way, Bristol, BS30 8FJ. Contact: hello@kubitdocs.com.
What we collect, and why
We collect as little as the transaction needs.
| Data | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Your email address | To send your order confirmation and download links, and to tell you when a document you own is revised | Performance of our contract with you |
| Your purchase record (which document, when, amount) | To provide your entitlement and future revisions, and to keep lawful accounting records | Contract; and legal obligation (tax law) |
| Technical data (IP address, timestamps) at download | To deliver the file and to detect and prevent abuse of download links | Our legitimate interest in the security of the service |
We do not collect card or payment details. Payment is handled by our payment provider (see below), who is the merchant of record; we never see or store your card information.
We do not use your data for advertising, and we do not sell it. The revision emails are part of the product you bought — you keep getting the current version — not marketing.
Who processes your data for us
We use a small number of processors, each under a data-processing agreement:
- Cloudflare — hosts the website and stores order and entitlement records and the document files. Global infrastructure.
- Paddle — our payment provider and merchant of record. Paddle takes the payment, handles card data and calculates and remits any VAT. Paddle is a separate controller for the payment data it processes; see Paddle's own privacy notice.
- Microsoft 365 — hosts our email (hello@kubitdocs.com). (Order emails will move to a dedicated transactional email provider before launch; this notice will name it.)
Some of these providers process data outside the UK. Where they do, the transfer is covered by appropriate safeguards (UK International Data Transfer Agreement or equivalent standard contractual clauses).
How long we keep it
- Order and accounting records: 6 years, as UK tax law requires.
- Your entitlement (email + which documents you own): for as long as we offer the free-revisions promise on that document, so we can honour it.
- Download logs: a rolling short period for security, then deleted.
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected, to have it erased (where we are not required to keep it, e.g. tax records), to restrict or object to processing, and to data portability. To exercise any of these, email hello@kubitdocs.com.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would ask you to contact us first so we can put things right.
Cookies
See our Cookie Policy.
Changes
We will post any changes to this notice on this page.