Legal
Privacy Policy
Last updated: October 2026
Hartwell & Grange ("we", "us") respects your privacy. This policy explains how we collect and use personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Information we collect
When you purchase, we receive your name, email address and billing country so that we can deliver your eBook and issue a receipt. We do not see or store your full card details.
Payments by Stripe
All payments are processed by Stripe. Card and payment information is collected directly by Stripe and handled in accordance with the Stripe Privacy Policy. Stripe may act as merchant of record for some transactions, handling tax, fraud prevention and receipts. Stripe is certified to PCI DSS Level 1.
How we use your data
To fulfil your order, provide customer support, meet legal and tax obligations, and — only with your consent — send occasional updates.
Retention
Order records are kept for six years to satisfy HMRC requirements, then securely deleted.
Your rights
You may request access to, correction or deletion of your data, or object to processing. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Contact
Email us at privacy@hartwellandgrange.co.uk.