Home / Privacy notice
Legal
Privacy notice
This page says what personal data the site collects, why, who else handles it, and how to reach me about it.
Who I am
SalesAndTrading.co.uk is run by Charlie Blake, a pen name. Under UK data protection law I am the controller of the personal data described on this page.
You can reach me about anything on this page at hello@salesandtrading.co.uk.
What I collect and why
| Data | Why | Legal basis | Where it comes from and who holds it |
|---|---|---|---|
| Email address, name and payment details | To sell you a plan, take payment and let you manage or cancel your subscription | Contract | You give it to Stripe at checkout and Stripe holds it. In my Stripe account I can see your email, your plan and whether you have paid. I never see your full card number. |
| Sign-in data: a one-time link and the email it belongs to, kept for 15 minutes, plus short-lived counters that limit repeat requests from one email or IP address | To sign you in without a password and stop misuse of the sign-in form | Contract, and legitimate interests in keeping the site secure | Created when you ask for a sign-in link and stored at Cloudflare. Nothing here lasts longer than 15 minutes. |
| Sign-in cookies | To keep you signed in and show your plan and renewal date | Contract | Set in your browser when you sign in. See Cookies below. |
| Visit statistics: pages viewed, where you came from, country, browser and device type | To see which pages are useful and to fix problems | Legitimate interests | Cloudflare Web Analytics. It uses no cookies and does not build profiles of individual visitors. |
| Technical data such as your IP address, browser type and the time of each request | To deliver pages and block attacks | Legitimate interests | Cloudflare handles this whenever you load the site. |
| Messages you send me by email, and by WhatsApp if you have Premium | To answer you and deliver the plan you bought | Contract, or legitimate interests | Emails to hello@ are forwarded by Cloudflare to a Gmail mailbox that I read. |
| Transaction records | To keep accounts and meet tax obligations | Legal obligation | Stripe and my own accounting records. |
What I don't do
I don't sell your data, share it for advertising or use it to profile you. The site has no advertising cookies. The only emails I send are sign-in links and replies to your messages, plus any payment receipts Stripe sends.
The only automated decision is this one: when Stripe shows an active plan for your email address, the site lets you into the members area.
Who else handles your data
I use these providers, and each handles your data only as far as it needs to in order to provide its service.
- Stripe takes payments, runs subscriptions and hosts the billing page where you can update your card or cancel. Stripe also uses some data for its own legal duties, such as fraud prevention. See Stripe's privacy policy.
- Cloudflare hosts the site, protects it, provides the visit statistics, stores sign-in links and forwards emails sent to hello@. See Cloudflare's privacy policy.
- Resend sends the sign-in email. See Resend's privacy policy.
- Google provides the Gmail mailbox that receives mail sent to hello@, and Google Fonts, which the sign-in page and members area use (see Cookies and fonts below). See Google's privacy policy.
- Telegram and WhatsApp are separate services with their own privacy policies. I only see your details there if you join the Telegram channel or message me on WhatsApp.
Some of these providers process data outside the UK, including in the United States. They rely on approved safeguards, such as the UK-US data bridge or standard contractual clauses approved for use in the UK.
Cookies and fonts
I use only the storage the site needs to work. There are no advertising or cross-site tracking cookies, and the visit statistics above use none.
| Name | What it does | How long it lasts |
|---|---|---|
| st_session | Keeps you signed in. Your browser sends it with each request so the server can check your plan. Scripts on the page cannot read it. | 30 days on Self-Study and Pro, 90 days on Premium, or until you sign out |
| st_plan, st_email, st_exp, st_renews | Let the members area show your plan, your email address and your renewal date. They give no access on their own. | The same as st_session |
| tg_dismissed (session storage) | Remembers that you closed the Telegram pop-up on the homepage | Until you close the tab |
The sign-in page, the error page and the members area load their fonts from Google Fonts. When they do, your browser contacts Google's servers and your IP address is sent to Google. The public pages, including the homepage, the free module and the guides, use fonts stored on this site.
How long I keep it
- Sign-in links and the counters that limit repeat requests: 15 minutes at most.
- Stripe records: Stripe keeps them while you have a plan and afterwards for as long as the law requires. I keep transaction records for as long as tax law requires me to.
- Emails and messages: only as long as I need them to answer you and deal with anything that follows.
- Visit statistics and technical logs: for the period Cloudflare keeps them under its own policy.
Your rights
You can ask me for a copy of your personal data, ask me to correct or delete it, ask me to restrict how I use it, or ask for it to be moved to another service. You can also object to any use that relies on legitimate interests. To use any of these rights, email hello@salesandtrading.co.uk. I'll reply within one month, and I may need to check that it's you first.
If you are unhappy with how I've handled your data, please tell me first so I can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Age
The course is for adults. You must be 18 or over to buy a plan, and I don't knowingly collect personal data from anyone under 18.
Changes to this notice
If I change how I use personal data, I'll update this page and the date at the top. If the change is a material one, I'll also email active subscribers.