Privacy Policy

1. Who We Are

SoloDeck (“we”, “us”, “our”) operates the website solodeck.co. We are the data controller responsible for your personal data.

If you have any questions about this privacy policy or how we handle your data, please contact us at hello@solodeck.co.

2. What Data We Collect

We collect the following personal data:

• When you make a purchase: your name, email address, billing address, and payment information. Payment card details are processed securely by Stripe and are never stored on our servers.
• When you contact us: your name, email address, and any information you include in your message.
• When you visit our website: technical data such as your IP address, browser type, operating system, and pages visited. This is collected automatically through cookies and similar technologies.

3. How We Use Your Data

We use your personal data for the following purposes:

• To fulfil your order: processing payment, sending confirmation emails, and providing download links for your purchased products. (Legal basis: performance of a contract)
• To respond to your enquiries: replying to messages sent via our contact form or email. (Legal basis: legitimate interest)
• To comply with legal obligations: maintaining records for tax and accounting purposes as required by HMRC. (Legal basis: legal obligation)
• To improve our website: understanding how visitors use our site so we can improve the experience. (Legal basis: legitimate interest)

We will never sell, rent, or share your personal data with third parties for their marketing purposes.

4. Who We Share Your Data With

We only share your data with third parties where it is necessary to provide our services or where we are legally required to do so:

• Stripe: our payment processor. Stripe processes your payment details securely in accordance with PCI DSS standards. See Stripe's privacy policy.
• Vercel: our website hosting provider. See Vercel's privacy policy.
• Email provider: we use a transactional email service to send order confirmations and download links. Your email address is shared with this provider solely for the purpose of delivering these emails.
• HMRC and legal authorities: where required by law for tax, legal, or regulatory purposes.

5. How Long We Keep Your Data

• Order records: we retain order information (including your name, email, and purchase details) for 6 years after the date of purchase, as required by HMRC for tax and accounting purposes.
• Contact form messages: we retain messages for up to 12 months after the enquiry has been resolved, unless a longer retention period is required for legal reasons.
• Website analytics data: anonymised usage data is retained for up to 26 months.

6. Cookies

Our website uses cookies for the following purposes:

• Essential cookies: required for the website to function, including maintaining your shopping cart. These cannot be disabled.
• Analytics cookies: help us understand how visitors use our website so we can improve it. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of our website.

7. Your Rights

Under UK data protection law (UK GDPR and the Data Protection Act 2018), you have the following rights:

• Right of access: you can request a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct inaccurate or incomplete data.
• Right to erasure: you can ask us to delete your personal data, subject to our legal obligations to retain certain records.
• Right to restrict processing: you can ask us to limit how we use your data in certain circumstances.
• Right to data portability: you can request your data in a structured, commonly used, machine-readable format.
• Right to object: you can object to our processing of your data where we rely on legitimate interest as our legal basis.

To exercise any of these rights, please contact us at hello@solodeck.co. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Payment processing is handled entirely by Stripe using industry-standard encryption.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

9. International Transfers

Some of our third-party service providers (such as Stripe and Vercel) may process your data outside the UK. Where this occurs, we ensure that appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved transfer mechanisms under UK data protection law.

10. Children's Privacy

Our website and products are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with the “last updated” date revised accordingly. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us at hello@solodeck.co.