Legal
Privacy Policy
Last updated: 28 May 2026
This policy explains what personal data we collect when you purchase from System Thirty, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.
1. Who we are
System Thirty is a digital products brand. For the purposes of UK data protection law, we are the data controller for personal information collected through this website and during the purchase process.
If you have any questions about this policy or your personal data, please contact us at: hello@systemthirty.co.uk
2. What data we collect
When you make a purchase, we collect the following information:
- Your name and email address (provided during Stripe checkout)
- The product purchased and the amount paid
- Your purchase date and a Stripe transaction reference
- Whether you opted in to receive further communications from us
We do not collect or store your payment card details. All payment processing is handled securely by Stripe, Inc. under their own privacy policy.
3. How we use your data
We use your personal data for the following purposes:
- To fulfil your purchase — sending you your download links by email immediately after payment. This is necessary to perform our contract with you.
- To maintain transaction records — keeping a record of your purchase for accounting and customer support purposes. This is based on our legitimate interest in running the business lawfully.
- To send you further communications — only if you explicitly ticked the opt-in box at checkout. This is based on your consent and you may withdraw it at any time.
4. Marketing communications and opt-in
We will only send you marketing emails, product updates, or newsletters if you gave your explicit consent by ticking the opt-in box during checkout. Completing a purchase does not automatically add you to any mailing list.
If you opted in, you can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any email we send, or by emailing hello@systemthirty.co.uk.
5. How long we keep your data
- Purchase records are retained for seven years to comply with HMRC accounting requirements.
- Marketing preferences and contact details (where consent was given) are retained until you withdraw consent or request deletion.
- If you did not opt in to marketing, your email is used only to deliver your purchase and is not used for any further contact.
6. Who we share your data with
We share your data only with the following third parties, and only to the extent necessary:
- Stripe, Inc. — payment processing. Your payment details are processed entirely by Stripe under their privacy policy at stripe.com/gb/privacy.
- Resend — transactional email delivery. Your email address is passed to Resend solely to send your download email.
We do not sell, rent, or share your personal data with any third party for marketing purposes.
7. Your rights under UK GDPR
You have the following rights regarding your personal data:
- Right of access — you can request a copy of the data we hold about you.
- Right to rectification — you can ask us to correct inaccurate data.
- Right to erasure — you can ask us to delete your data, subject to our legal retention obligations.
- Right to object — you can object to processing based on legitimate interest.
- Right to withdraw consent — where processing is based on consent (marketing), you can withdraw it at any time.
- Right to lodge a complaint — you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
To exercise any of these rights, contact us at hello@systemthirty.co.uk. We will respond within 30 days.
8. Cookies and tracking
This website does not use cookies, tracking scripts, or analytics tools. No data is collected simply by visiting this page.
9. Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with an updated date. We will not retroactively change how we use data you have already provided without seeking fresh consent where required.