Privacy

Who is responsible for your data

Jotwren is the trading name of Phillip Vidal, a sole trader based in the United Kingdom. Postal address: 28 Vince Court, London N1 6EA. Email: contact@jotwren.com. We’re the “controller” of the personal data described here under UK data protection law. Contact us about anything on this page through the contact form or by email.

What we collect, and why

When you message us

Your name, email address, the topic, your message and any order reference you add, so that we can reply. To stop spam, we also keep a scrambled code made from your email address and connection (not your IP address itself), which is deleted automatically after about two hours. Legal basis: our legitimate interest in answering you, or taking steps you asked for before or under a purchase.

When you buy

Stripe collects your payment details on its secure checkout page. We never see your card number. Stripe tells us your name, email address, billing address, what you bought, the amount and a payment reference. We keep your email address, what you bought, the amount and the payment reference (and, for refused EU orders, the billing country), plus how many times you’ve downloaded the files and a scrambled copy of your download code. We use them to deliver your files, help you if something goes wrong, handle refunds and keep the sales records the law requires. Legal basis: performing our contract with you, and our legal obligations.

When you browse

We count product page views and Buy clicks, per product and per month, to learn which products are useful. These counts are anonymous: no cookies, nothing stored in your browser and nothing that identifies you. To avoid counting a refresh twice, your IP address and browser type are combined into a code held briefly in memory, never stored, and forgotten within 30 minutes. If your browser sends a “do not track” or Global Privacy Control signal, we don’t count you at all. We also use Cloudflare Web Analytics, which measures overall visits without cookies or tracking individuals.

Like any website, our hosting providers keep short-lived technical logs, including IP addresses, to keep the site secure and fix faults. Legal basis: our legitimate interest in running a secure, useful shop.

Cookies

This site sets no cookies. The checkout page belongs to Stripe and uses its own cookies, under its own privacy notice.

Who processes your data for us

• Google Cloud and Firebase: our database, file storage and servers, located in London.
• Cloudflare: website hosting, security and visit statistics.
• Google (Gmail): the mailbox we reply to messages from and send download emails with.
• Stripe: payment processing, fraud prevention and receipts. See Stripe’s privacy notice.

Some of these companies also process data in the United States. Where they do, the transfer is protected by the UK’s approved safeguards: the UK–US data bridge or the UK’s standard contract clauses.

We don’t send your details to AI services, advertisers or mailing lists. We only email you about your order or in reply to your message.

How long we keep it

• Messages: deleted automatically two years after we last dealt with them.
• Orders: six years, because UK tax rules require sales records to be kept that long. Download links stop working after 30 days.
• Anti-spam codes: about two hours. Technical logs: up to 30 days.

Your rights

You can ask for a copy of your data, or ask us to correct it, delete it, stop or limit using it, or send it to you in a portable format. Some rights have limits; for example, we must keep sales records for tax. We’ll reply within one month. If you’re unhappy with how we’ve handled your data, please tell us first. You can also complain to the Information Commissioner’s Office.

Changes

If we change how we use your data, we’ll update this page and the date at the top. Jotwren doesn’t offer accounts or newsletters.