Privacy

Data we end up holding

• Order details. At checkout the payment processor takes your name, email address and card information. What reaches us is a record that the order was paid and the email address you used. Your card number is never sent to us and never stored by us.
• Emails you send us. We keep the conversation and your address so we can reply and, if needed, continue it later.
• Standard server logs. Requested pages, a rough location inferred from the network address, browser type and referring page, recorded automatically to keep the site running and to detect abuse.

We never request, receive or hold your broker login, your balance, your trade history or any other detail of your trading account. The robot runs on your own machine and sends nothing back to us.

Why we hold it

• To deliver your purchase and keep your download link valid.
• To answer support questions and send service notices about an order you placed.
• To run and protect the site.
• To meet legal, accounting and tax duties and to prevent fraud.

We send no marketing email to anyone who has not asked for it, and personal data is never sold, rented or swapped with anyone.

Who else has access

Only the providers without which the shop could not run: the payment processor, our web host, and the service that carries our email. Each sees no more than its own task requires. Beyond that, we disclose data only when the law compels us to.

Retention

Sales paperwork has to survive as long as the revenue and accounting rules say, and in practice that means several years. Correspondence sticks around while it is still of any use to either of us, then goes. Request logs turn over on a short cycle.

Your rights

Depending on your country, you may be entitled to see the data we hold about you, correct it, erase it, limit or object to its use, or receive a copy. Send the request to [email protected]; we will carry it out without asking for a reason and without making it hard.

One honest exception: an order record that tax law obliges us to keep cannot be erased on request, and erasing your data neither extends nor restores a licence.

Cookies

Explained separately on the Cookies page.

Where processing happens, and safeguards

Processing can happen outside your own borders, the providers named above included. The defences are the ordinary sensible ones: traffic encrypted in transit, entry restricted to the handful of people whose job requires it, and credentials held somewhere other than the application database. Perfect security does not exist, and we are not going to claim ours is the exception.

Under-18s

This shop is built for grown-ups, and we take no data from a minor on purpose. Should you believe some has reached us anyway, say so and it goes.

Reaching us

Privacy queries and requests: [email protected].