Legal
Privacy Policy
Last updated 20 April 2026
This policy explains how Deskwright(“we”, “us”) handles personal data when you visit deskwright.co.uk, buy a product from deskwright.gumroad.com, or contact us.
Who we are
Deskwright (formerly trading as SoloDesk Studio) is a publisher of operational toolkits — Notion systems, bundles, and software for solo operators, small care teams, and boutique agencies. Operated globally from the United Kingdom. You can reach us at hello@deskwright.co.uk.
What we collect
- Purchase data. When you buy a product, Gumroad (our payment processor) collects your name, email address, billing country, and card payment details. We receive your name, email, and purchase record; we do not see your card details.
- Contact data. When you email us, we receive your email address and any content you include in the message.
- Analytics. We use Vercel Analytics on this site, which collects anonymous, cookieless page-view data (URL, referrer, country, browser type). Vercel Analytics does not use cookies or fingerprint visitors and is GDPR-compliant out of the box.
- Server logs. Our hosting provider (Vercel) retains short-term access logs including IP address, user agent, and requested URL, used only for security and debugging.
What we do NOT collect
- We do not set any tracking cookies.
- We do not sell data to third parties.
- We do not use behavioural advertising trackers.
- We do not collect special-category personal data.
Why we use it
- Purchase data — to deliver the product you bought, send receipts, and handle support requests. Lawful basis: contract (GDPR Art. 6(1)(b)).
- Contact data — to reply to you. Lawful basis: legitimate interests (Art. 6(1)(f)).
- Analytics + logs — to understand site usage and diagnose issues. Lawful basis: legitimate interests (Art. 6(1)(f)).
Who we share it with
- Gumroad — payment processing and digital delivery. Gumroad’s privacy policy is at gumroad.com/privacy.
- Stripe — if you purchase via our self-hosted checkout. Stripe’s privacy policy is at stripe.com/privacy.
- Vercel — hosting, logs, analytics. Vercel’s privacy policy is at vercel.com/legal/privacy-policy.
- Google Workspace / Gmail — for our inbox (hello@, support@ forwarded to Gmail). Google’s privacy policy is at policies.google.com/privacy.
We do not share personal data with any other third parties unless required by law.
How long we keep it
- Purchase records — 7 years (UK tax record retention requirement).
- Email correspondence — 3 years after last contact, then deleted.
- Analytics — aggregated, retained per Vercel Analytics defaults (typically 24 months).
- Server logs — typically 30 days.
Your rights (UK GDPR)
You have the right to:
- Know what personal data we hold on you
- Receive a copy of it (data portability)
- Correct inaccurate data
- Have it deleted (where legally permissible)
- Restrict or object to processing
- Withdraw consent at any time (where processing is consent-based)
- Complain to the UK Information Commissioner’s Office (ico.org.uk)
To exercise any of these rights, email hello@deskwright.co.uk. We aim to respond within 30 days.
International transfers
Our hosting, analytics, and payment processors may process data in the United States or the European Union. All are covered by appropriate safeguards — either UK adequacy decisions, EU Standard Contractual Clauses, or the UK/US Data Bridge.
Changes to this policy
If we change this policy materially, we’ll update the date at the top and, for significant changes, email known customers.
Contact
Any question about this policy, or any data-related request, goes to hello@deskwright.co.uk.