Privacy Policy
Last Updated: August 2026 · Compliant with UK GDPR & Data Protection Act 2018
1. Introduction & Data Controller
This Privacy Policy outlines how UK Credit Secrets ("we", "us", or "our"), operated by Michael Sherriff, collects, processes, and protects personal data when you visit our website (https://ukcreditsecrets.co.uk) or purchase our digital educational products.
We are committed to maintaining the trust and confidence of our visitors and customers. We do not sell, rent, or trade email lists or personal information with outside commercial organisations for marketing purposes.
If you have questions about this policy or our data practices, contact us at: support@ukcreditsecrets.co.uk.
2. Lawful Bases for Processing
Under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018, we process your personal data under the following lawful bases:
- Contractual Necessity: To process your payment, deliver digital product downloads, and provide customer support.
- Legitimate Interests: To monitor website performance, secure our web server against malicious traffic, and improve educational content.
- Legal Obligation: To maintain accurate tax and accounting records for commercial transactions.
- Consent: Where you voluntarily submit an enquiry or opt into communications.
3. Data We Collect
We may collect and process the following categories of data:
A. Order & Contact Details: When you purchase our product, our payment processor (Stripe) collects your name, email address, and billing address to fulfill the purchase and deliver your digital download link.
B. Payment Information: Payment transactions are processed directly by Stripe Payments Europe, Ltd. via 256-bit SSL encryption. We do NOT store or have access to your raw credit or debit card numbers on our servers.
C. Technical & Analytics Data: We collect anonymised log data including IP addresses, browser types, operating systems, referring URLs, and page navigation patterns via Google Analytics 4 and Cloudflare Edge Security.
4. Third-Party Service Providers
We work with trusted third-party service providers who comply strictly with UK GDPR:
- Stripe (Payment Gateway): Encrypted checkout processing and fraud prevention.
- Cloudflare Inc. (CDN & Security): DDoS protection, edge caching, and web application firewall security.
- Google Analytics 4: Aggregated, privacy-focused traffic reporting (IP addresses are anonymised).
5. Data Retention
We retain customer transactional data for a minimum period of 6 years in compliance with UK statutory accounting, tax, and consumer warranty regulations. Analytics data is automatically purged according to standard retention schedules.
6. Your Statutory Rights Under UK GDPR
As a UK citizen, you have comprehensive statutory rights regarding your personal data:
Request a copy of the personal data we hold about you (Subject Access Request).
Request deletion of personal data where no overriding legal obligation exists.
Request immediate correction of inaccurate or incomplete personal records.
Lodge a complaint directly with the Information Commissioner's Office (ICO) at ico.org.uk.
7. Cookies & Tracking
Our website uses standard essential cookies to maintain secure sessions and performance cookies via Google Analytics. You can adjust your browser settings at any time to refuse cookies, although some security features may be affected.
8. Contact Us
For any privacy enquiries, Subject Access Requests, or questions regarding our data practices, please email: support@ukcreditsecrets.co.uk.