Privacy notice
Version: 4 November 2026
Who handles your information
Circle 37 Ltd (company number 17561600), trading as UKPrepKit is the data controller. Registered office: 128 City Road, London, EC1V 2NX, United Kingdom. Contact hello@ukprepkit.co.uk about privacy.
Information and purposes
We use your checkout email, order reference, payment status, price, delivery/consent records and support correspondence to fulfil purchases, provide member access, handle refunds and protect the service. Stripe processes payment details under its own notice; we do not store full card numbers. One-time sign-in and session tokens are stored as hashes. The household quiz keeps answers in page memory and does not create a household profile.
Our legal bases
We rely on performance of our contract for purchases, delivery and related support; legal obligations for required financial records; and legitimate interests for proportionate security, service reliability and fraud prevention. Buying or downloading does not silently enrol you in marketing. Any marketing choice is separate from purchase and access.
Cookies and outside services
A necessary secure member-session cookie lasts up to seven days; signing out removes the server session and clears the cookie. Our VPS hosts the website and private files. Stripe processes payments. Brevo delivers transactional emails. Mailcow receives support email, and incoming UKPrepKit messages are copied to our Google Workspace support inbox. Email providers may process delivery/open/click information. YouTube player content loads when you choose to play; YouTube thumbnails may load with the page. Those providers process information under their own notices.
Where a provider processes information outside the UK, applicable transfer arrangements and contractual safeguards are required. Contact us for details of the safeguards relevant to your information. We do not sell your personal information or use solely automated decisions with legal or similarly significant effects.
Campaign attribution
Landing-page and campaign tags carried in page URLs may be recorded with your order to show which of our four landing pages led to a purchase. Reports distinguish payments and refunds. This attribution does not set analytics cookies or use browser storage, and does not send browsing events to an advertising platform. Unlabelled purchases remain unattributed.
How long information is kept
Purchase, consent and relevant refund/accounting records may be retained for up to six years where needed for legal obligations or claims. Account access records are retained as needed to provide the purchased downloads. Expired sign-in challenges and expired sessions are removed within 30 days after expiry. Routine logs are retained only as needed for troubleshooting and security, subject to the hosting and email providers’ retention controls. Closed support correspondence is reviewed for deletion after 24 months, unless needed for an ongoing issue, legal obligation or claim. Encrypted backups rotate through 14 daily copies; deletion from the active system may therefore take longer to disappear from backup copies. Unused marketing consent is not inferred from an order.
Your choices and rights
You may request access, correction, erasure, restriction, portability or objection where applicable. Some records must be retained for legal obligations or claims. Email hello@ukprepkit.co.uk to exercise rights or complain. You can also complain to the Information Commissioner’s Office.