# Privacy Policy


**Last updated:** 25 September 2026

## Who we are

PARAZETTEL is operated by Theo Stowell ("we", "us" or "our"). This policy explains how we handle personal data when you visit [parazettel.com](https://parazettel.com), join a mailing list, make a purchase, or contact us.

For privacy questions or to exercise your rights, email [theo@parazettel.com](mailto:theo@parazettel.com).

## The information we collect and why

| Activity | Information | Purpose and lawful basis |
| --- | --- | --- |
| Visiting the site | Technical and usage information collected by analytics and embedded services, such as pages viewed, referrer, device/browser information and events (for example, CTA, signup and checkout events) | To understand site use, improve the site and measure conversion. Our lawful basis for processing personal data for these purposes is our legitimate interests where applicable, or consent where required. Rules about accessing or storing information on your device also apply; see below. |
| Joining a mailing list | Email address, optional first name, selected form/list, and marketing preferences | To send the resource, update or marketing messages you asked for. We rely on consent for marketing emails, unless a lawful existing-customer exception applies. |
| Buying a product | Contact, order and transaction information, payment status, purchased product, and checkout attribution (including campaign and referrer details) | To take payment, provide access or delivery, provide support, prevent fraud, measure purchases, and keep required business and tax records. We rely on performance of a contract, legal obligations, and legitimate interests where appropriate. We do not receive or store your full payment-card number. |
| Contacting us | The information you include in your message | To respond to you and manage our relationship with you. We rely on our legitimate interests and, where relevant, steps taken before entering into a contract. |

Please do not send special-category personal data (for example, health information) unless we have specifically asked for it and explained why.

## Services that process data

We use the following services in connection with the website and offers:

- **Netlify** hosts the site and its serverless functions.
- **Kit** provides mailing-list forms, email marketing and book-delivery emails. After a paid book checkout, our webhook sends the purchaser's email address to Kit and applies a purchase tag to arrange delivery. The book email contains PDF and ePub links hosted through Kit's FileKit service. Adding a purchase tag for delivery does not, by itself, mean you have opted in to marketing emails.
- **Stripe Managed Payments**, including Onelink, provides Checkout, payment processing, receipts and transaction support. For transactions using Managed Payments, Stripe is the merchant of record. Stripe processes payment and transaction data under its own terms and privacy documentation.
- **Plausible** and **Umami** provide website analytics and conversion-event measurement.
- **Google Fonts** provides the site fonts.
- **Vidalytics** and, where a video is embedded, **YouTube's privacy-enhanced embed service** may receive technical information when their video players load or play.
- **Skool** and other external destinations may collect data under their own privacy notices when you follow a link from this site.

These providers may process data outside the UK. Where a restricted transfer applies, we must ensure a lawful transfer mechanism is in place. Contact us if you would like more information about a particular service or transfer.

## Cookies, similar technologies and browser storage

We use your browser's `localStorage` to keep a randomly generated attribution ID and first- and latest-visit details, including landing page, referring site and any campaign parameters. This record is created when you visit the site, persists between visits until you clear your browser storage, and may be sent with checkout metadata to help us understand which visits lead to purchases. On a purchase return page, we also store a record that a particular checkout session has already been reported to analytics, to avoid counting it twice. That record also persists until you clear browser storage. Neither record is needed to complete a purchase.

Umami and Plausible analytics load across the site. Video players, including Vidalytics on the book page, and Kit forms load where they are embedded. These services may use cookies, browser storage or similar technologies and receive technical information under their own policies. We do not currently provide an on-site control to switch off these services; your browser settings can limit some storage, but may not prevent requests to them. We are reviewing whether additional consent or objection controls are needed under the applicable UK rules.

## Marketing choices

You can unsubscribe from marketing emails at any time using the link in the message or by emailing us. We keep a record of opt-outs so that we can honour them. Transactional or service communications about a purchase, including the book download email, may still be sent where necessary.

## Retention

We keep information only for as long as necessary for the purpose for which it was collected:

- mailing-list information is retained until you unsubscribe, ask for deletion, or we no longer use the list;
- purchase and transaction records are retained for the period needed to provide the purchase, deal with disputes and meet accounting or tax obligations;
- support correspondence is retained for as long as reasonably needed to resolve the query and maintain a record of it; and
- analytics information is retained according to the settings of the relevant provider and only as long as needed for the stated purpose. The browser attribution and purchase-reporting records described above remain on your device until you clear them.

## Your rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict, object to, or receive a copy of your personal data. You may withdraw consent at any time where we rely on it. You also have an absolute right to object to direct marketing.

To make a request, email [theo@parazettel.com](mailto:theo@parazettel.com). You also have the right to complain to the [Information Commissioner's Office](https://ico.org.uk/make-a-complaint/), the UK data-protection regulator.

## Security and changes

We use reasonable organisational and technical measures to protect personal data, but no internet transmission or storage system is completely secure. We may update this policy when our practices or legal obligations change; the latest version will always be published here.