Legal

Privacy Policy

Last updated 20 April 2026

This policy explains how Deskwright(“we”, “us”) handles personal data when you visit deskwright.co.uk, buy a product from deskwright.gumroad.com, or contact us.

Who we are

Deskwright (formerly trading as SoloDesk Studio) is a publisher of operational toolkitsNotion systems, bundles, and software for solo operators, small care teams, and boutique agencies. Operated globally from the United Kingdom. You can reach us at hello@deskwright.co.uk.

What we collect

  • Purchase data. When you buy a product, Gumroad (our payment processor) collects your name, email address, billing country, and card payment details. We receive your name, email, and purchase record; we do not see your card details.
  • Contact data. When you email us, we receive your email address and any content you include in the message.
  • Analytics. We use Vercel Analytics on this site, which collects anonymous, cookieless page-view data (URL, referrer, country, browser type). Vercel Analytics does not use cookies or fingerprint visitors and is GDPR-compliant out of the box.
  • Server logs. Our hosting provider (Vercel) retains short-term access logs including IP address, user agent, and requested URL, used only for security and debugging.

What we do NOT collect

  • We do not set any tracking cookies.
  • We do not sell data to third parties.
  • We do not use behavioural advertising trackers.
  • We do not collect special-category personal data.

Why we use it

  • Purchase datato deliver the product you bought, send receipts, and handle support requests. Lawful basis: contract (GDPR Art. 6(1)(b)).
  • Contact datato reply to you. Lawful basis: legitimate interests (Art. 6(1)(f)).
  • Analytics + logsto understand site usage and diagnose issues. Lawful basis: legitimate interests (Art. 6(1)(f)).

Who we share it with

We do not share personal data with any other third parties unless required by law.

How long we keep it

  • Purchase records7 years (UK tax record retention requirement).
  • Email correspondence3 years after last contact, then deleted.
  • Analyticsaggregated, retained per Vercel Analytics defaults (typically 24 months).
  • Server logstypically 30 days.

Your rights (UK GDPR)

You have the right to:

  • Know what personal data we hold on you
  • Receive a copy of it (data portability)
  • Correct inaccurate data
  • Have it deleted (where legally permissible)
  • Restrict or object to processing
  • Withdraw consent at any time (where processing is consent-based)
  • Complain to the UK Information Commissioner’s Office (ico.org.uk)

To exercise any of these rights, email hello@deskwright.co.uk. We aim to respond within 30 days.

International transfers

Our hosting, analytics, and payment processors may process data in the United States or the European Union. All are covered by appropriate safeguards — either UK adequacy decisions, EU Standard Contractual Clauses, or the UK/US Data Bridge.

Changes to this policy

If we change this policy materially, we’ll update the date at the top and, for significant changes, email known customers.

Contact

Any question about this policy, or any data-related request, goes to hello@deskwright.co.uk.