Privacy policy

Last updated: 11 April 2026

This privacy policy explains how oldkindle.com handles personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We have deliberately built the site to collect as little as possible, because less data means less risk and less for us to look after.

Who is the data controller?

Graith Internet, Forest Vale Industrial Estate, 23 Foxes Bridge Road, Cinderford, GL14 2PQ, United Kingdom, is the data controller for oldkindle.com. You can contact us at hello@oldkindle.com for any data-protection matter including subject-access requests.

What we collect

1. Web server logs

When you visit any page on this site, our web server writes an entry to a log file containing your IP address, the page you requested, the time, the HTTP status, your user-agent string, and the page that referred you. This is the normal, unavoidable state of being connected to the internet. We use these logs to investigate errors, block abusive traffic, and measure rough traffic patterns.

Legal basis: legitimate interests (running a website securely).
Retention: 30 days, then automatically rotated and deleted.

2. Stripe checkout data, if you buy the Survival Guide

If you buy the Survival Guide, payment is handled by Stripe, a PCI-compliant payment processor. Stripe collects your email address, card details, billing address (for VAT), and the amount of the transaction. We do not see or store your card details at any point. We receive from Stripe: your email address, the order reference, the amount paid, the VAT component, and a payment-success confirmation.

We use your email address to send you the download link and, if necessary, to contact you about a problem with the download. We do not use it for marketing. We do not add you to any newsletter. We do not share it with anyone.

Legal basis: contract (we need to deliver what you bought).
Retention: seven years for order records (HMRC retention requirement for VAT-registered businesses), then deleted.

3. Email correspondence

If you email us at hello@oldkindle.com, we keep the thread for as long as the matter is open and for a reasonable period afterwards (up to two years). We do not add email correspondents to any list.

Legal basis: legitimate interests (answering the person who wrote to us).
Retention: up to two years.

What we don’t collect

• No tracking cookies. This site does not set analytics cookies, advertising cookies, or any third-party tracking.
• No Google Analytics, no Facebook Pixel, no ad networks. We use no third-party analytics or advertising scripts.
• No user accounts. There is nothing to log into. Paid content is delivered via a signed, time-limited URL — not via a password.
• No newsletter signup. We don’t run one.

We do load Bootstrap and Font Awesome from public content-delivery networks (cdn.jsdelivr.net and cdnjs.cloudflare.com) for page styling. These CDNs see your IP address and the file you requested when your browser fetches those files. They do not receive your identity or what you’re reading. If this bothers you, a browser extension such as NoScript or an ad-blocker with script controls can block those fetches — the site will still work, it will just look plainer.

Who we share data with

• Stripe Payments Europe, Ltd. for processing Survival Guide purchases. Stripe is a data controller in its own right for payment data and is certified under applicable UK and EU data-protection frameworks. Their privacy policy is at stripe.com/gb/privacy.
• Our email service. Transactional emails (the download link after purchase, replies to support messages) are sent via a conventional SMTP provider. They see the email address we send to and the message content.
• HMRC. We are required to retain VAT records for seven years and to share them if audited.

We do not sell, rent, or swap data with anyone. We do not share data with marketing companies.

Your rights

Under UK GDPR you have the right to:

• Ask us what data we hold about you (“subject access request”)
• Ask us to correct inaccurate data
• Ask us to delete your data, subject to our legal retention obligations (HMRC for VAT records)
• Ask us to restrict or object to our processing
• Ask for a machine-readable copy of your data (“data portability”)
• Complain to the Information Commissioner’s Office if you think we’ve got it wrong. Their contact details are at ico.org.uk/make-a-complaint.

To exercise any of these rights, email hello@oldkindle.com. We’ll respond within one month, which is the UK GDPR statutory time limit.

Data outside the UK

Stripe processes payments on servers that may be located in the United States or the European Economic Area. This transfer is covered by the standard contractual clauses published by the UK government and the EU Commission for data transfers to countries without an adequacy decision.

Changes to this policy

If we materially change how we handle personal data, we’ll update the “last updated” date at the top of this page and describe the change. Minor wording fixes don’t get announced; substantive changes do.