Privacy Policy
Last updated: 6 April 2026
1. Who we are
Universe Unlocked is operated by Charlie Gregg, a sole trader based in the United Kingdom. For data protection enquiries, contact hello@universe-unlocked.com.
2. What data we collect
When you make a purchase, the following data is collected:
- Name and email address — provided during checkout for order fulfilment and delivery of your download link
- Billing address — collected by Stripe for payment processing
- Payment information — processed entirely by Stripe; we never see or store your card details
We use Google Analytics 4 to understand how visitors interact with our website. Google Analytics collects anonymised usage data such as pages visited, time on site, and general geographic region. This data helps us improve our website and is processed by Google in accordance with their Privacy Policy. No personally identifiable information is collected through analytics.
3. How we use your data
- Order fulfilment — to deliver your purchase and download link (legal basis: contract performance)
- Customer support — to respond to enquiries about your order (legal basis: contract performance)
- Legal obligations — to maintain financial records as required by HMRC (legal basis: legal obligation)
We do not use your data for marketing purposes. We will never sell or share your personal data with third parties for their marketing purposes.
4. Third-party processors
- Stripe — payment processing. Stripe Privacy Policy
- Resend — transactional email delivery (download links). Resend Privacy Policy
- Netlify — website hosting. Netlify Privacy Policy
- Google Analytics — anonymised website usage analytics. Google Privacy Policy
5. Data retention
Transaction records are retained for 6 years as required by HMRC. Email addresses used for order delivery are retained for the same period. You may request deletion of non-legally-required data at any time.
6. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate personal data
- Request erasure of your personal data (where no legal obligation requires retention)
- Data portability
- Object to processing
- Lodge a complaint with the Information Commissioner's Office (ICO)
To exercise any of these rights, contact hello@universe-unlocked.com.
7. Security
We use HTTPS encryption for all pages. Payment data is handled entirely by Stripe, a PCI Level 1 certified payment processor. We do not store sensitive payment information on our servers.
8. Changes to this policy
We may update this policy from time to time. Changes will be posted on this page with an updated revision date.