COMPLETE SUPPLIER BUNDLE — SAVE £41.96COMPLETE SUPPLIER BUNDLE — SAVE £41.96COMPLETE SUPPLIER BUNDLE — SAVE £41.96COMPLETE SUPPLIER BUNDLE — SAVE £41.96COMPLETE SUPPLIER BUNDLE — SAVE £41.96COMPLETE SUPPLIER BUNDLE — SAVE £41.96
SOURCE & SORT

Privacy Policy (Draft)

Privacy Policy (Draft)

This notice explains what personal data SOURCE & SORT collects, why, and what rights you have under the UK GDPR and Data Protection Act 2018.

Who is responsible

The data controller is Kaiser Mitchell, trading as SOURCE & SORT, a sole trader based in the United Kingdom. Business address: Field House, Winfarthing Road, Diss, IP22 2EQ, United Kingdom. Data requests: sourceandsort@gmail.com.

What we collect

  • Order data: name, email address, billing country and order contents — needed to supply your download and meet tax and accounting duties.
  • Correspondence: anything you send us by email.
  • Technical data: standard server and security logs, and analytics only if enabled with consent.

We do not ask for or store card details. Payments are processed by Shopify and its payment providers; we receive confirmation of payment, not card numbers.

Lawful bases

  • Contract — supplying the guide you bought (Article 6(1)(b)).
  • Legal obligation — tax and accounting records (Article 6(1)(c)).
  • Legitimate interests — answering enquiries, preventing fraud, keeping the service secure (Article 6(1)(f)).
  • Consent — any non-essential cookies or analytics (Article 6(1)(a)).

Who processes data for us

Shopify hosts the store and processes orders and payments. Shopify acts as a processor; its own privacy terms also apply.

Your download is delivered by a digital delivery service operating within the Shopify platform. It processes your email address and order reference for the purpose of sending the download link.

Beyond Shopify's built-in store functions, we use no third-party analytics, advertising or marketing tools. If that changes, this notice will be updated before they are introduced.

Retention

Order and tax records are kept for at least five years after the 31 January submission deadline of the relevant tax year, which is the minimum HMRC requires of a sole trader for Self Assessment. We keep them no longer than necessary for that purpose and for dealing with any dispute. Enquiries that do not lead to an order are kept for 12 months and then deleted.

International transfers

Shopify processes personal data in the United States, Canada, Singapore and other countries where it or its sub-processors operate. Shopify provides contractual safeguards for these transfers under its Data Processing Addendum, which is available from Shopify on request.

Your rights

You may access your data, correct it, erase it, restrict or object to processing, and request portability. Email sourceandsort@gmail.com. You can also complain to the Information Commissioner's Office at ico.org.uk.

Cookies

Essential cookies keep the basket and checkout working and are set without consent because they are strictly necessary. Any analytics or marketing cookies will be set only with your consent, which you can withdraw at any time.

Analytics and consent

We do not currently use third-party analytics or advertising tools. If we introduce them, we will ask for your consent before they run and update this notice.

Children

The store is not directed at children. Purchases must be made by someone able to enter a contract; if you are under 18, a parent or guardian should buy on your behalf.

Changes

We will update this notice when our processing changes and show the revision date. Last updated: 10 November 2026.