Privacy policy

The Foot in Diabetes Ltd ("we", "us", "our"), company number 13870866, registered office 2nd Floor, 5 High St, Westbury on Trym, Bristol, United Kingdom, BS9 3BY, is the controller of the personal data described here. This policy covers store.thefootindiabetes.com (the "Store") and explains what we hold, why, who helps us run it, and what rights you have under UK data protection law (UK GDPR and the Data Protection Act 2018). Contact: info@thefootindiabetes.co.uk.

1. What we hold

• Your email address, used to sign you in to your library and to send you your purchase emails.
• Your purchases, meaning which modules and units you own and the order they came from.
• Download history, meaning which file you downloaded and the date and time. We use it to keep your library working and to apply our refund policy.
• Names you enter for certificates, which we print on the certificate you ask for.
• Contact messages, meaning what you send us through the contact form, with your email address.

Payment details are collected by Paddle.com Market Ltd ("Paddle"), our merchant of record, and not by us. We do not see or store your card number. Paddle gives us your email address, the items bought and the order details.

2. Why we use it

• To supply what you bought: sign-in, library, downloads and certificates. The basis is performance of our contract with you.
• To meet tax and accounting duties and to handle refunds. The basis is legal obligation and our contract with you.
• To reply to your messages. The basis is our legitimate interest in answering you.
• To keep the Store secure and prevent misuse of download links. The basis is our legitimate interest.

We do not sell your personal data and we do not share it for other companies' marketing.

3. Who helps us run the Store

These providers process data on our behalf:

• Paddle: payment, VAT, receipts and refunds. Paddle processes your payment data under its own privacy notice.
• Resend: sends our emails, such as your sign-in link and purchase confirmation.
• Cloudflare R2: stores the files you download. The storage is in the EU.
• Hostinger: hosts the Store and its database.

4. How long we keep it

• Order and entitlement records are kept for six years, to meet tax requirements and to keep your library working.
• Contact messages are kept for two years.
• Other data is kept only while it is needed for the purposes above.

5. Your rights

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete anything that we do not need to keep for legal records. You can also object to our use of your data based on legitimate interests. Email info@thefootindiabetes.co.uk or use the contact page. We will respond within the time the law requires, normally one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

6. International transfers

Where a provider handles data outside the UK, it is done under appropriate safeguards, such as the UK's approved transfer mechanisms. Our file storage is in the EU.

7. Cookies

This website sets only the cookie that keeps you signed in, and no advertising or tracking cookies. When you pay, Paddle's checkout window sets its own cookies to process the payment and prevent fraud; Paddle's own privacy and cookie notices apply to those.

8. Changes

We may update this policy. The date at the top of the page shows when it last changed.