Privacy Policy

Everyday ELSA is operated by Clare [Surname], a sole trader based in England. For the purposes of UK data protection law, Clare is the data controller for personal information collected through this website.

If you have any questions about how we handle your data, please contact us.

We collect the following information when you use this site:

• Email address and name — when you purchase a resource, sign up for our newsletter, or contact us.
• Payment information — we do not store your card details. Payments are processed by Stripe, who handle all card data securely.
• Download activity — we log when download links are used (IP address, timestamp) to prevent misuse and enforce download limits.
• Technical data — server logs may capture your IP address and browser type as a normal part of web hosting.

• To deliver your purchased downloads by email.
• To send you the newsletter you signed up for (with your consent).
• To respond to enquiries you send via our contact form.
• To prevent fraud and enforce our terms of use.
• To comply with legal obligations.

• Contract — processing your purchase and delivering downloads.
• Consent — sending our newsletter. You may withdraw consent at any time by clicking “unsubscribe” in any email.
• Legitimate interests — preventing fraud, improving the site, responding to enquiries.

• Stripe — processes card payments. Stripe is a PCI-DSS Level 1 certified payment provider.
• Resend — sends transactional emails (download links and newsletter confirmations).
• Neon (PostgreSQL) — our database is hosted in the EU.

We do not sell your data to any third party.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Request deletion of your data (subject to legal obligations).
• Object to or restrict processing in certain circumstances.
• Complain to the ICO at ico.org.uk.

To exercise any of these rights, please contact us.