Privacy Policy

1. Who we are

This Website is operated by Kesters Nook Limited (“we”, “us”, “our”), a company registered in England and Wales. We are the data controller for the personal data we collect through this Website.

If you have any questions about how we handle your data, please contact us at steven@stevenmather.co.uk.

2. What data we collect

We collect a minimal amount of personal data, limited to what is necessary to process your order and deliver your digital products. The data we collect includes:

• Name — as provided during checkout.
• Email address — used to send your download link and any order-related communications.
• Payment information — your payment is processed securely by Stripe. We do not receive, store, or have access to your full payment card details. Stripe may provide us with a partial card number (last four digits), card type, and confirmation of payment.
• Order information — what you purchased, the date and time, and your Stripe transaction reference.

We do not collect any special category data (such as health data, ethnicity, or political opinions). Our products are aimed at children and young athletes, but purchases are made by adults. We do not knowingly collect personal data from children under the age of 13.

3. How we use your data

We use your personal data for the following purposes:

• To fulfil your order — generating a secure download link and emailing it to you. Our legal basis for this is the performance of our contract with you (Article 6(1)(b) UK GDPR).
• To send transactional communications — order confirmations, download links, and any service-related messages (for example, if we need to reissue a link). Legal basis: performance of contract.
• To comply with legal obligations — for example, maintaining financial records for tax purposes. Legal basis: legal obligation (Article 6(1)(c) UK GDPR).

We do not use your data for marketing purposes unless you separately opt in. If you choose to subscribe to our mailing list (which is entirely optional and separate from any purchase), that subscription is managed by MailerLite and is subject to MailerLite’s own privacy policy.

4. Who we share your data with

We share your personal data only with the following third-party service providers, who process it on our behalf:

• Stripe (payment processing) — Stripe processes your payment securely. Stripe’s privacy policy is available at stripe.com/privacy.
• Resend (email delivery) — we use Resend to send your download link email. Resend’s privacy policy is available at resend.com/legal/privacy-policy.
• Vercel (website hosting) — our Website is hosted on Vercel. Vercel’s privacy policy is available at vercel.com/legal/privacy-policy.

We do not sell, rent, or otherwise share your personal data with any other third parties for their own purposes.

5. International data transfers

Some of our service providers (Stripe, Resend, and Vercel) are based in the United States. Where your personal data is transferred outside the United Kingdom, we rely on appropriate safeguards as permitted under UK data protection law, including the service providers’ compliance with recognised data transfer mechanisms such as Standard Contractual Clauses or equivalent protections.

6. How long we keep your data

• Download tokens expire automatically after 7 days. We do not maintain a database of tokens.
• Order records (name, email, product purchased, transaction reference) are retained for up to 6 years to comply with our legal and accounting obligations under HMRC rules.
• Payment data is held by Stripe in accordance with their data retention policies.

7. Cookies and tracking

This Website does not use advertising or analytics cookies. We may use essential cookies that are strictly necessary for the functioning of the Website (for example, to process your checkout session). These do not require your consent under UK law.

We do not use any third-party tracking tools, social media pixels, or behavioural advertising technologies on this Website.

8. Your rights

Under UK data protection law (the UK GDPR and the Data Protection Act 2018), you have the following rights in relation to your personal data:

• Right of access — you can ask us for a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct any inaccurate or incomplete data.
• Right to erasure — you can ask us to delete your personal data, subject to our legal obligations to retain certain records.
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
• Right to data portability — you can ask us to provide your data in a structured, commonly used format.
• Right to object — you can object to our processing of your data in certain circumstances.

To exercise any of these rights, please contact us at steven@stevenmather.co.uk. We will respond within one month of receiving your request.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO). You can contact the ICO at ico.org.uk/make-a-complaint or by telephone on 0303 123 1113.

9. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page with the date it was last updated. We encourage you to check this page periodically.

10. Contact us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Kesters Nook Limited
Email: steven@stevenmather.co.uk