Privacy Policy
Last updated: August 2026
This policy explains what we do with your personal information when you visit our website, buy something from us, or get in touch.
1. Who we are
Technocroft Ltd, trading as Technocroft, is the data controller for the personal information described here. That means we decide how and why it’s used, and we’re responsible for looking after it.
Address: 33 Esplanade Terrace, Edinburgh, EH15 2ES
Email: technocroft@btinternet.com
Phone: 077 866 24985
ICO registration number: SC 221409
We’re a small business and don’t have a Data Protection Officer – we’re not required to. Any question about your information should go to technocroft@btinternet.com and will reach the person who deals with it.
2. What we collect
When you buy something: your name, billing and delivery address, email address, phone number, order details, and a record of your correspondence with us. Your card details are entered directly into our payment provider’s systems – we never see or store your full card number.
When you sign up to our mailing list: your email address, your name if you give it, and records of what we’ve sent you and which messages you opened or clicked.
When you contact us: whatever you choose to tell us in your message, plus your contact details.
When you use the website: your IP address, browser and device type, pages visited, how you arrived, and how long you stayed. Some of this comes from cookies – see the Cookie Policy for detail and for how to refuse the non-essential ones.
If you leave a review: the name you choose to display, your review text and rating.
We don’t ask for and don’t want special category data – information about health, ethnicity, religion, sex life, political or philosophical beliefs, trade union membership, genetics or biometrics. Please don’t include it in messages to us.
3. Why we use it, and our legal basis
|
What we do |
Data used |
Lawful basis |
|---|---|---|
|
Take and fulfil your order, deliver goods, supply download links |
Identity, contact, order, delivery |
Contract – necessary to perform our contract with you |
|
Take payment and prevent fraud |
Contact, transaction, technical |
Contract, and legitimate interests in preventing fraud |
|
Deal with returns, refunds, faults and complaints |
Identity, contact, order, correspondence |
Contract, and legal obligation |
|
Answer your enquiries |
Contact, correspondence |
Legitimate interests in responding to people who contact us |
|
Keep accounting and tax records |
Identity, contact, transaction |
Legal obligation |
|
Send marketing emails |
Contact, marketing preferences |
Consent, or legitimate interests where you’re an existing customer (see section 4) |
|
Understand how the site is used and improve it |
Technical, usage |
Consent, via the cookie banner |
|
Publish reviews and check they’re genuine |
Display name, review, order |
Legitimate interests in showing accurate reviews, and legal obligation to prevent fake ones |
|
Protect the site’s security |
Technical, usage |
Legitimate interests in keeping our systems secure |
Where we rely on legitimate interests, we’ve considered whether our interest is outweighed by your rights, and concluded it isn’t. You can object to any of it – see section 8 – and we’ll stop unless we have compelling grounds not to.
4. Marketing
We’ll only send you marketing emails if you’ve asked us to, or if you’ve bought from us and we’re telling you about similar products. Either way, every message has an unsubscribe link, and you can also email technocroft@btinternet.com at any time to stop. We act on unsubscribe requests promptly.
Unsubscribing from marketing doesn’t stop transactional messages – order confirmations, dispatch notices, download links, replies to your questions. We have to send those to fulfil your order.
We don’t sell, rent or trade your details to anyone for their own marketing.
5. Who we share it with
We share personal information with the service providers who help us run the business. They act on our instructions, are bound by contract to keep your data confidential and secure, and can’t use it for their own purposes.
|
Provider |
What for |
|---|---|
|
Stripe |
Processing payments |
|
WordPress |
Hosting the website and its database |
|
Amazon |
Delivering digital downloads |
|
Technocroft |
Sending transactional and marketing email |
|
Royal Mail |
Delivering parcels |
|
WordPress |
Website analytics |
|
Our accountant |
Bookkeeping, tax returns |
Replace this table with your actual providers before publishing – naming the real ones is part of being transparent, and a generic list isn’t compliant.
We may also disclose information if we’re legally required to, to establish or defend legal claims, or if the business is sold or transferred – in which case the buyer would be bound by this policy.
6. Sending data outside the UK
Some of our providers process data outside the United Kingdom. Where that happens, we make sure the transfer is protected by one of the safeguards UK law recognises: a UK adequacy decision for the country concerned, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses.
You can ask us for details of the safeguards applying to any particular transfer.
7. How long we keep it
|
Information |
Kept for |
|---|---|
|
Order, invoice and transaction records |
6 years from the end of the tax year they relate to (HMRC requirement) |
|
Customer account details |
While your account is active, then 2 years |
|
Marketing list membership |
Until you unsubscribe, then a minimal suppression record so we don’t contact you again by mistake |
|
Enquiries and correspondence |
2 years from last contact |
|
Website analytics |
12 months |
|
Reviews |
While published, or until you ask us to remove yours |
When we no longer need information we delete it or anonymise it so it can no longer identify you.
8. Your rights
Under UK data protection law you can:
Ask for a copy of the personal information we hold about you
Ask us to correct anything inaccurate or incomplete
Ask us to delete it, where there’s no good reason for us to keep it
Ask us to restrict how we use it while a concern is being resolved
Object to us using it on the basis of legitimate interests, and object to direct marketing at any time – this one is absolute, we must always stop
Ask for portability – a copy in a machine-readable format, or transfer to another provider, where we hold it on the basis of consent or contract and process it automatically
Withdraw consent at any time, where consent is what we relied on. This doesn’t affect anything we did before you withdrew it.
To exercise any of these, email technocroft@btinternet.com. It’s free. We’ll respond within one month, and tell you if we need longer because the request is complex. We may need to confirm your identity first – we’d rather check than hand your data to the wrong person.
Some rights are qualified. For example, we can’t delete order records we’re legally required to retain for tax purposes, though we can stop using them for anything else.
9. Complaining
If you’re unhappy with how we’ve handled your information, please tell us first – we’d like the chance to put it right.
You also have the right to complain to the Information Commissioner’s Office:
Website: ico.org.uk
Helpline: 0303 123 1113
Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
10. Security
We use technical and organisational measures appropriate to a business of our size – encrypted connections (HTTPS), access limited to those who need it, strong authentication on our accounts, and reputable providers who maintain their own security standards. No system is perfectly secure, but if a breach occurs that’s likely to risk your rights and freedoms, we’ll tell you and the ICO as the law requires.
11. Children
Our website and shop are intended for adults. We don’t knowingly collect personal information from children under 13. If you believe a child has given us their details, contact us and we’ll delete them.
Books and products may be bought for children – but the purchase, and the data, belong to the adult making it.
12. Other websites
Our site may link to other websites. We’re not responsible for their privacy practices, and this policy doesn’t cover them. Please read theirs.
13. Changes to this policy
We’ll update this page when our practices change. The date at the top tells you when it was last revised. If we make a significant change to how we use your information, we’ll tell you directly where we reasonably can.