Privacy Policy

1. What data this website collects

This website is a static informational page. We do not operate a user account system, run a mailing list, or collect form submissions directly. The data collected is limited to the following:

Analytics data (Google Analytics 4)
We use Google Analytics 4 to understand how visitors use this site. Google Analytics collects:

• Pages visited and time spent on each page
• Approximate geographic location (country/city level, derived from IP address)
• Browser type, operating system, and device category
• Referring website or search query that brought you to the site
• Click events on links and buttons

This data is collected via cookies and is processed by Google LLC. IP addresses are anonymised before storage. Google Analytics data is aggregated and used solely to improve this website. We do not use it to identify individual visitors.

For more information on how Google processes analytics data, see Google's Privacy Policy and Google Analytics data practices.

Google Fonts
This site loads fonts from Google Fonts (fonts.googleapis.com). When your browser requests a font file, Google's servers log your IP address. We do not receive this data. See Google Fonts privacy FAQ for details.

No other data is collected on this website. We do not use tracking pixels, advertising networks, session recording tools, heatmaps, or any other third-party scripts beyond Google Analytics and Google Fonts.

2. Checkout and payment data

When you click a buy button, you are redirected to a checkout page hosted by Stripe, who act as the Merchant of Record for your purchase. Stripe collects and processes your name, email address, billing address, and payment details as part of the purchase transaction. Controlled Copy does not receive or store your payment card details.

After a successful purchase, Stripe shares your name and email address with us so we can fulfil your order (deliver the download). This information is used only for order fulfilment and is not used for marketing without your consent.

Stripe's privacy practices are governed by their own policy at stripe.com/privacy.

3. Cookies

This website uses cookies only through Google Analytics. These are analytics cookies used to distinguish visitors and track sessions. They do not contain personally identifiable information.

You can opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on, or by disabling cookies in your browser settings.

4. How we use your data

• Analytics data — to understand site traffic and improve the content and usability of this website
• Order data from Stripe — to deliver your purchased documents and respond to support enquiries

We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for automated decision-making or profiling.

5. Legal basis for processing (GDPR)

If you are located in the European Economic Area, United Kingdom, or a jurisdiction with similar data protection legislation, we process your data on the following legal bases:

• Legitimate interests — for analytics data collected via Google Analytics, where our interest in understanding site usage is balanced against your privacy rights
• Contract performance — for order data received from Stripe, where processing is necessary to deliver your purchase

6. Data retention

Google Analytics data is retained for 14 months by default, after which it is automatically deleted from Google's systems.

Order data (name and email) received from Stripe is retained for as long as necessary to fulfil the order and comply with applicable legal and tax obligations, after which it is securely deleted.

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at info@controlledcopy.com. For data held by Stripe or Google, please contact those organisations directly.

8. Data security

This website is a static site hosted on Microsoft Azure Static Web Apps. No personal data is stored on our servers. Payment processing is handled entirely by Stripe, who are PCI DSS compliant.

9. Third-party links

This site contains links to external websites (Stripe checkout, Google documentation, and regulatory guidance). We are not responsible for the privacy practices or content of those sites.

10. Changes to this policy

We may update this policy from time to time, for example if we add new features or tools to the site. The effective date at the top of this page will be updated when changes are made. We encourage you to review this page periodically.

11. Contact

For any questions, requests, or concerns relating to this privacy policy or how we handle your data, please contact us at info@controlledcopy.com.