Purchase privacy notice
Who is responsible
Mark Williams trading as Vantage Digital Studio is responsible for the purchase information described here.
Email: sales@vantagedigitalstudio.com
Telephone: 07405 507906.
Address: 64 Carisbrooke Road, Liverpool, L4 3RA, United Kingdom.
This notice covers component purchases, delivery and purchase support. It supplements the website privacy notice for other enquiries and services.
What we collect
We collect your email address, declared country, selected product, order and payment references, amount and currency, payment/refund status, accepted terms and immediate-download consent, and delivery records. Delivery records include whether our email provider accepted a message and when our server first supplied the ZIP; these are not proof that you read the email or opened the files.
Stripe collects payment details, your billing name and address. We use the payment and billing-country information returned by Stripe to check the purchase. We do not store your full card number or security code in our order system.
We also process messages you send for support and limited technical information needed to secure the service, such as IP addresses, request times and request outcomes. Our delivery service uses short-lived hashed identifiers to limit repeated requests. Hashing does not make this information anonymous.
Information comes from you, Stripe and our delivery/email services. Required checkout information is needed to process the purchase; without it we cannot complete the order.
Why we use it
We use order information to arrange payment, supply your component, restore access and provide purchase support: this is necessary to take steps you request before a contract and to perform the contract.
We keep the records needed for tax and consumer-law duties to meet legal obligations.
We use proportionate security, fraud-prevention and dispute records for our legitimate interests in protecting purchases and resolving claims.
Immediate-download consent concerns your cancellation rights. It is not permission to send marketing or blanket consent for unrelated use of your data. Buying a component does not subscribe you to marketing, and we do not sell your purchase information.
Who receives it
Stripe processes payment information and returns payment results. It also has its own responsibilities for activities such as fraud prevention and legal compliance.
Cloudflare hosts the website and will host the protected delivery system and order records for the paid service. ZIP files are stored privately; access is checked before delivery.
Resend sends order confirmations and protected links. It receives your recipient address, order email, download link and attached terms/consent record. Messages come from orders@receipts.vantagedigitalstudio.com.
Apple iCloud Mail handles replies and support messages sent to sales@vantagedigitalstudio.com. Our bank, Monzo Business, receives settlement information needed for payouts. Relevant records may also be shared with professional advisers or authorities where necessary and lawful.
These providers do not all receive the same information. Support messages and payment-card details are not included in routine Resend delivery requests.
International processing
Our providers can process information outside the UK, including in the EEA and United States. We do not promise UK-only storage.
Resend states that email content and delivery logs are stored in the United States. Choosing Ireland as the sending region does not change that storage location. Its published agreement provides Standard Contractual Clauses with the UK Addendum; it also describes participation in the Data Privacy Framework and UK Extension.
Stripe and Cloudflare publish international-transfer arrangements including contractual safeguards for UK data. Apple's privacy information describes its own processing arrangements. Contact us for information about the safeguards relevant to your information or a copy where available.
How long we keep it — approved schedule for the planned service
We keep a minimal purchase, licence, consent and financial record until the later of six years after the transaction and five years after the relevant 31 January Self Assessment filing deadline. A longer legal requirement or unresolved dispute can extend retention of the relevant records.
Unpaid, expired or abandoned checkout records are deleted after 30 days once we have confirmed no payment, open authorisation, claim or unresolved delivery issue exists. Records needing investigation remain restricted until that review is complete.
Routine support messages are deleted 12 months after the matter is resolved. Only necessary evidence of a continuing claim or statutory obligation is kept longer.
Routine security/request records are kept for up to 90 days. Download links expire after 24 hours; expiry does not delete the order or end the licence. Temporary delivery data is cleared sooner where possible. Providers keep some separate records under their own legal duties and retention arrangements.
When a retention period ends, we review and delete or anonymise the relevant information unless a documented legal or unresolved-case hold applies. We review continuing holds at least every 90 days. Limited protected backups may retain deleted information for up to 30 further days; provider-operated backups may have different documented periods. An expired link or deleted record does not remove your statutory rights.
Cookies and automatic checks
The checkout uses necessary session/security storage. Stripe's hosted checkout also uses its own technology, described in its privacy and cookie notices. The purchase flow does not add customers to an advertising audience.
Payment status, UK eligibility and download entitlement are checked automatically. Failed checks may stop payment capture or block a download. If you believe a check is wrong, contact us for review. Stripe may carry out separate fraud checks under its own privacy notice.
Your rights
Depending on the circumstances, you can ask to access or correct your information, erase it, restrict its use or receive a portable copy.
You can object to processing based on our legitimate interests. Contact sales@vantagedigitalstudio.com to exercise your rights; we may ask for proportionate information to confirm your identity. Some information must be retained to meet legal obligations or deal with claims.
You can also complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.