Privacy Policy

Last updated: 9 October 2026

This page explains what data is collected when you use this website (geraldwhitlock.co.uk), how it is used, and your rights under UK GDPR (the UK General Data Protection Regulation) and the Data Protection Act 2018.

Who we are

This website, the Gerald Whitlock channel and the guides sold here are run by the team behind Gerald Whitlock ("we", "us"). Gerald Whitlock is an AI-generated presenter, not a real person. Postal address: 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom. For any privacy question, or to exercise your rights under the UK GDPR, email [email protected]. We aim to reply within 30 days. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

The website is aimed at a UK audience. We handle your personal data in line with the UK GDPR and the Data Protection Act 2018.

What data is collected

If you submit the email opt-in form

When you submit the form to receive the free guide (or any other opt-in form on this site), we collect:

• Your first name
• Your email address
• The date and time of submission
• Approximate IP address (used to detect spam and abuse only — not used for tracking)

The data is stored in Kit (formerly ConvertKit), our email marketing provider. Kit is a US company with UK GDPR-compliant data processing in place. Their privacy policy is at kit.com/privacy.

If you make a purchase

When you buy a guide, Payhip runs our checkout and delivers the files. Payments are processed by Stripe and PayPal. Payhip calculates and collects VAT where required. At checkout, Payhip collects:

• Your name and email address
• Your billing address (for VAT purposes)
• Your payment method (we never see or store your card details)
• The transaction record

Payhip's privacy policy is at payhip.com/privacy.

We receive your name and email from Payhip after purchase so we can deliver the product and send any follow-up emails described on the sales page.

If you browse the website

We do not currently use third-party analytics or advertising trackers. Our hosting provider (Cloudflare Pages) maintains anonymous server logs of website traffic (IP address, browser type, page requested, referrer). These logs are kept for a short period for security and operational purposes.

We do not use cookies for tracking, advertising, or user identification.

Services we use

• Kit (email newsletter, USA)
• Cloudflare (hosting, sign-up form and email forwarding, USA)
• Payhip (checkout and file delivery, UK)
• Stripe and PayPal (payments)
• Ko-fi (if you choose to support the channel)
• YouTube (our video channel)

How the data is used

Your name and email are used to:

• Deliver the product or guide you requested
• Send the email sequence described on the relevant sales or opt-in page
• Respond to questions or refund requests you send us
• Send occasional related emails about new guides or updates (with a clear unsubscribe link in every email)

We do not sell, rent, or share your data with any third party for marketing purposes.

Legal basis for processing

Under the UK GDPR, our legal basis for processing your data is:

• Consent — for the email list. You opt in voluntarily and can unsubscribe at any time with one click.
• Contract — for purchases. Processing your data is necessary to deliver the product you paid for.
• Legitimate interests — for basic server logs and fraud prevention, balanced against your privacy interests.

How long the data is kept

• Email list: until you unsubscribe. After unsubscribe, your email is retained only as a suppression record (so we don't accidentally email you again) and is deleted on request.
• Purchase records: kept for as long as tax and accounting law requires, generally six to seven years.
• Server logs: up to 30 days.

Your rights under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data (subject to legal record-keeping requirements for purchases)
• Restrict the processing of your data
• Object to processing for direct marketing (one-click unsubscribe in every email)
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email [email protected]. We respond within 30 days.

International data transfers

Some of the services above are based in the USA. Where your data is transferred there, it is protected by the UK Extension to the EU-US Data Privacy Framework or by standard contractual clauses.

Children

This website is intended for adults aged 18 and over. We do not knowingly collect data from anyone under 18.

Changes to this policy

If we change this policy, we will update the "Last updated" date at the top. Significant changes will be notified to email subscribers.

Contact

Questions about privacy: [email protected]