Privacy Policy
Last updated 26 August 2026. This page forms part of the agreement between you and UP DIGITAL PRODUCTS LTD.
This website is operated by UP DIGITAL PRODUCTS LTD (“we”, “us”), a private limited company registered in England and Wales under company number 17418750, with its registered office at 65 London Wall, London, EC2M 5TU, United Kingdom. You can reach us at support@updigitalproducts.com. We are not currently registered for VAT.
We are the controller of the personal data described below, for the purposes of the UK GDPR and the Data Protection Act 2018.
1. What we collect
We only collect what we need to answer you, take an order and keep the records the law requires us to keep.
| Category | Examples | Where it comes from |
|---|---|---|
| Contact details | Name, email address, and the business name and billing address you want on the invoice | You, when you email us or place an order |
| Order records | What you bought, the price, the date, the invoice number and the delivery email address | Generated when you order |
| Correspondence | The emails and letters you send us and our replies | You |
| Payment records | The fact and date of payment, the amount, and the last four digits and card type shown on the receipt | Our payment provider |
We do not receive or store your full card number, expiry date or security code. Card details are entered on the payment provider’s own page and never reach us.
We do not knowingly collect data from children under 13, and we do not sell products to them. We do not carry out profiling or any automated decision-making that produces legal or similarly significant effects on you.
2. Why we use it, and on what legal basis
| Purpose | Legal basis (UK GDPR Article 6) |
|---|---|
| Replying to your enquiry and preparing a quote | Article 6(1)(b) — steps at your request before entering a contract |
| Taking payment, delivering the product and providing support | Article 6(1)(b) — performance of the contract |
| Keeping accounting and tax records | Article 6(1)(c) — legal obligation (Companies Act 2006 s.386 and the Finance Acts) |
| Handling a complaint, a refund or a legal claim | Article 6(1)(f) — our legitimate interest in defending and resolving claims |
| Sending you news or offers by email | Article 6(1)(a) — your consent, which you can withdraw at any time |
Giving us your details is not a statutory requirement, but we cannot invoice you or deliver a digital product without a name and a delivery email address. If you would rather not provide them, we will not be able to complete an order.
3. Marketing
We only send marketing email if you have asked for it, or if you bought from us and we are offering a similar product — the “soft opt-in” permitted by regulation 22 of the Privacy and Electronic Communications Regulations 2003. Every message carries an unsubscribe link, and you can opt out at any time by emailing support@updigitalproducts.com. Opting out of marketing does not stop the emails we have to send about an order you have placed.
4. Who else sees your data
We do not sell personal data and we do not share it with third parties for their own marketing. We share it only with:
- Our payment provider, to take payment and to process refunds and chargebacks.
- Our email and hosting providers, who store the messages and files as part of running the service.
- Our accountant and, where required, HM Revenue & Customs, for tax and statutory accounts.
- Professional advisers, regulators, or a court, where we are required or permitted by law to do so.
Each provider acts as our processor under a written contract that meets Article 28 of the UK GDPR, and may use the data only on our instructions.
5. Transfers outside the UK
Some of our providers store data outside the United Kingdom. Where they do, the transfer is covered by one of the safeguards in Chapter V of the UK GDPR: an adequacy decision made by the Secretary of State (which includes the EEA), the UK International Data Transfer Agreement, or the UK Addendum to the EU standard contractual clauses. You can ask us which safeguard applies to a particular provider and we will tell you.
6. How long we keep it
| Record | Kept for |
|---|---|
| Enquiries that did not become an order | 12 months from the last message |
| Order, invoice and payment records | 6 years from the end of the financial year they relate to — the period required by the Companies Act 2006 and by HMRC |
| Complaints and dispute files | 6 years from resolution, matching the limitation period for a contract claim under the Limitation Act 1980 |
| Marketing consents and opt-outs | Until you withdraw consent; a record of the opt-out itself is kept so that we do not contact you again |
When a retention period ends we delete the data or anonymise it so that it can no longer identify you.
7. Your rights
Under the UK GDPR you have the right to:
- be told what we hold about you and receive a copy (Article 15);
- have inaccurate data corrected (Article 16);
- have data erased where we no longer need it (Article 17);
- restrict how we use it while a dispute is resolved (Article 18);
- receive the data you gave us in a portable format (Article 20);
- object to processing based on our legitimate interests, and to object to direct marketing at any time with no exceptions (Article 21);
- withdraw consent at any time, without affecting anything done before you withdrew it (Article 7(3)).
To exercise any of these, email support@updigitalproducts.com. We will respond within one month. That period can be extended by two further months for complex requests, and we will tell you within the first month if that happens. There is no charge unless a request is manifestly unfounded or excessive.
If you are unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain at any time to the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — ico.org.uk, telephone 0303 123 1113. Complaining to the ICO does not affect your right to take the matter to court.
8. Security
This site is served over HTTPS. Access to order records is limited to the people who need it to do their job. If a personal data breach occurs and it is likely to result in a risk to your rights and freedoms, we will report it to the ICO within 72 hours of becoming aware of it, as Article 33 requires, and we will tell you directly if the risk to you is high.
9. Cookies
This website sets no cookies. See our Cookie Policy for the detail.
10. Data protection officer
We have not appointed a data protection officer. We are not a public authority, our core activities do not consist of large-scale regular and systematic monitoring, and we do not process special category data on a large scale — so none of the conditions in Article 37 of the UK GDPR applies. Data protection questions go to support@updigitalproducts.com.
11. Changes
If we change this policy we will change the date at the top of this page. Where a change materially affects how we use data we already hold about you, we will tell you by email before it takes effect.