Privacy Policy
Last updated: 06 August 2026
1. Who is responsible for your data
Secret Bible is the data controller for personal data collected through this website. You can reach us at lydia@secret-bible.com.
2. What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Your name and email address | To deliver your download link, send your receipt, and answer support enquiries | Performance of a contract |
| Billing country and postcode | Tax calculation and fraud prevention, collected by our payment processor | Legal obligation / legitimate interests |
| Order records and transaction ID | Accounting, tax records and dispute resolution | Legal obligation |
| Download activity (link opened, IP, timestamp) | To detect and prevent unauthorised sharing of the file | Legitimate interests |
| [Marketing email address, if you offer a list] | [To send occasional emails about new work] | [Consent — withdrawable at any time] |
| [Analytics data, if you install analytics] | [To understand how the site is used] | [Consent, via cookie banner] |
We never see your card details. Card data is entered directly into Stripe's systems and is not accessible to us.
3. Who we share it with
We use the following processors, each of which handles your data on our instructions:
- SendOwl — checkout, order records and secure file delivery. Privacy policy
- Stripe — payment processing and fraud prevention. Privacy policy
Some of these providers are based outside the UK. Where data is transferred internationally it is protected by UK International Data Transfer Agreements, the UK Addendum to the EU Standard Contractual Clauses, or an adequacy decision.
We do not sell your data, and we do not share it with advertisers.
4. Cookies
This website sets no advertising or tracking cookies of its own. Our checkout provider sets cookies that are strictly necessary to process your order and prevent fraud; these do not require consent. [If you add analytics or a Meta/TikTok pixel, you must add a consent banner and only load them after consent is given.]
5. How long we keep it
Order and transaction records are kept for six years from the end of the financial year in which the purchase was made, as required by UK tax law. Support correspondence is kept for [24 months]. Marketing consent records are kept until you unsubscribe, plus [24 months] to evidence the consent.
6. Your rights
Under UK GDPR you have the right to access the personal data we hold about you, to have it corrected, to have it erased (where we are not legally required to keep it), to restrict or object to our processing of it, to receive it in a portable format, and to withdraw any consent you have given. To exercise any of these, email lydis@secret-bible.com. We will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put it right first.
7. Security
This site is served over HTTPS. Payment and delivery are handled by PCI-compliant third parties. Files are delivered by expiring links rather than as permanent public URLs.
8. Children
This product is sold to adults. We do not knowingly collect data from anyone under 18.
9. Changes
If we change this policy we will update the date at the top of this page.