This is template wording. Have it reviewed by a solicitor before you rely on it.
What we collect
Account email, payment reference, and reading progress. Name each field.
What we never collect
No advertising identifiers, no third-party trackers, no data sold or rented. This section is a promise made on the home page, keep it exact.
Children’s data
Child profiles hold a first name and an age band only. State the legal basis and the applicable regime (GDPR-K, COPPA, DPDP Act as relevant).
Cookies
Which cookies are strictly necessary and which, if any, are optional.
Who we share with
Payment processor, email provider, hosting. Name each processor and its location.
How long we keep it
Retention periods per data type and what happens on account deletion.
Your rights
Access, correction, deletion, portability, objection, and how to exercise them.
Security
Encryption in transit and at rest, access control, and breach notification.
Changes
How policy changes are communicated.
Contact
Data controller details and, if appointed, the DPO.
Questions about this document? Email us and a person will answer.