Draft. This page needs checking and the [BRACKETED] details filling in before the site goes live.
Back TopSet

Privacy

Last updated: [DATE]

We collect as little as we can. This page explains what we collect, why, and your rights under UK data protection law (UK GDPR).

Who is responsible for your data

[YOUR FULL NAME], trading as Topset Study, [POSTAL ADDRESS]. Email: [CONTACT EMAIL].

Our shop runs on Shopify

This website, its checkout and our order emails all run on Shopify. Shopify stores the data described below for us and only uses it as we tell it to, as our data processor. Shopify may store and handle data outside the UK, with the safeguards UK law requires. See Shopify's privacy policy.

Browsing the website

Shopify uses cookies it needs for the basket, the checkout and security. It may also use cookies for statistics, but only if you allow them in the cookie banner. See Shopify's cookie policy. We don't add any analytics, tracking or advertising tools of our own, and we don't sell or share data with advertisers.

If you choose "GCSE" or "A-level" on our predicted papers or notes page, your browser remembers that choice on your own device so you don't have to pick it again. When you get a resource, your browser also remembers that, so the "How was it?" review box is still there when you come back. Neither is sent to us.

When you get a free resource

Free resources go through our checkout as a free order: there's nothing to pay. The checkout asks for your email address, your name and a billing address. We get those, which resource you chose, when, and whether you ticked the box asking for news and offers. We use them:

  • To send you your download links in your order confirmation email. This is needed to give you the resource you asked for (contract).
  • To tell you about fixes to what you downloaded, for example if we correct a mistake. We do this because it's in your interest and ours that you revise from the right version (legitimate interests). These emails are rare.
  • To send you news about new Topset resources, only if you ticked the box. This is based on your consent. Every email has an unsubscribe link, and you can also email us to stop.

When you buy something

Payments are handled by Shopify. Shopify collects your card details, name, email address and billing address. We receive your name, email address, billing address, what you bought, when, and the boxes you ticked at checkout. We never see your card number.

We use this to send your download links, handle refunds and faulty files, check you're in the UK, stop fraud, and keep the records the law requires (for example for tax). Our lawful bases are performing our contract with you and our legal obligations. We don't use it to send you marketing unless you ticked the box for news and offers.

When you leave a review

We keep your star rating, what you wrote, your first name if you gave it, which resource it's about, and when. Reviews aren't linked to your email address. We use them to improve our resources.

We only show a review on the website if you ticked the box asking us to, and then only with your first name. You can ask us to take it down at any time. We show every review that asked to be shown, good or bad, unless it has rude language, personal details or spam. Please don't include your surname or other personal details.

When you ask to hear about challenge papers

If you give us your email on the challenge papers page, we keep it and the time you signed up, and we email you when challenge papers come out. This is based on your consent: every email has an unsubscribe link, and you can also email us to stop.

We never sell your email address or share it with anyone for their own marketing.

How long we keep it

  • Paid orders: we keep order records for 6 years, because HMRC requires it. Then we delete them.
  • News and challenge-papers emails: we keep your email address until you unsubscribe. After that we keep only a note that you unsubscribed, so we don't email you again by mistake.
  • Free orders without the news box ticked: we delete your details 12 months after your last free order.

Who we share it with

  • Shopify, which runs our website and checkout, takes payments, handles refunds, stores our email list and sends our emails.

We don't build profiles of the people who use Topset.

If you're under 18

Topset is made for students, so many of the people who use it are under 18. We only use what we need, news emails are off unless you tick the box, and we don't track you around the web. If you're under 13, please ask a parent or guardian before you give us your details. If you're under 18, please ask a parent or guardian before you buy.

Your rights

You can ask to see the data we hold about you, have it corrected, or have it deleted (unless we have to keep it by law, like order records). You can withdraw your consent to news emails at any time. Email us to do any of these. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.