Privacy notice

When you contact us, we receive the information you choose to send, such as your name, email address, enquiry and relevant order or document details. Please do not send passwords, full card details or unnecessary private information about your customers.

The contact form prepares a message in your email application. Form entries are held in the current browser page and are not saved in a website submission database. We receive the enquiry only when you send the email.

When you use an account or make a purchase, information needed to administer it may include contact details, purchase history, access permissions and payment status. Payment-card details are handled by the payment provider rather than the public enquiry form.

Signed-in support requests are saved in your account and our support inbox, together with their status history. Optional business profile details help prefill documents. Bank details saved in that profile are encrypted. Document drafts are stored in your browser tab, scoped to your account, until cleared or the tab session ends. Generated documents contain the information you choose to include.

The website and its hosting services process technical information necessary to deliver requested pages and keep the service secure, such as an IP address, browser information, request time and requested page. We do not use advertising trackers. We record a limited set of first-party website events to understand use of the catalogue and checkout. These events do not contain names, email addresses, account IDs, IP addresses, browser user agents, free-form search terms or cookie identifiers. Events are removed after 180 days.

Search terms and filters may appear in the page address and browser history. Do not enter sensitive personal information into the catalogue search.

For private-file downloads, we log the account, template, format, time, outcome, browser user agent and a hashed IP value for support, audit and abuse prevention.

We use enquiry information to answer questions and resolve issues. Where an enquiry concerns a purchase, this is necessary to take steps at your request or perform our contract. For other enquiries and service security, we rely on our legitimate interests in providing support and protecting the website, balanced against your rights.

We use purchase records to provide access and support under the contract, and to meet applicable accounting, tax and other legal obligations. We do not add enquiry senders to a marketing list without an appropriate lawful basis. Where we ask for consent, you may withdraw it.

Access is limited to people and service providers who need it to operate the website, provide email support, process payments, maintain security or meet legal obligations. Providers must handle information under appropriate contractual and security arrangements. Your email provider also handles messages you send under its own privacy terms.

We do not sell personal information. We may disclose relevant information to advisers, regulators or authorities where required by law or necessary to establish, exercise or defend legal claims.

Cloudflare provides DNS, traffic delivery and security services. Railway hosts the application and database. Stripe handles checkout and subscription billing. Our configured email provider processes support correspondence and, when enabled, account sign-in messages. Card details are entered on Stripe-hosted pages and are not stored by this application.

We retain enquiries for as long as needed to resolve them and deal with related follow-up, complaints or legal claims. We keep purchase and accounting records for the period required by applicable law. Security information is retained only for as long as needed to investigate and prevent misuse.

When deciding what to retain, we consider the purpose, sensitivity, continuing relationship, unresolved issues and legal obligations. Information that is no longer needed is deleted or anonymised.

Where a provider processes personal information outside the UK, we use the protection required by UK data protection law, such as an applicable adequacy decision or approved contractual safeguards. You can contact us for information about safeguards relevant to your information.

We use appropriate measures to restrict access and protect personal information. No internet transmission or storage method is completely risk-free. Keep your account and email credentials secure.

Depending on the circumstances, you may ask to access, correct, erase or restrict the use of your information, receive a portable copy, or object to processing based on legitimate interests. Where processing relies on consent, withdrawing it does not affect earlier lawful processing.

We may need to confirm your identity before responding. You can raise a concern with us using the contact details above, or complain to the Information Commissioner’s Office. These rights can have legal exceptions.

The service is intended for adult business users. We do not use automated decisions with legal or similarly significant effects on you. We update this notice when relevant practices change; material changes will be brought to your attention where required.