In short
- What you make in our apps never leaves your computer. We never see it.
- This website sets no cookies of its own, and runs no advertising or tracking. It counts presses of three buttons, as daily totals that say nothing about you.
- When you buy, our reseller Paddle takes the payment. We receive your name, email and order details, to send what you bought (and an app's activation code) and keep our accounts.
- Activation sends us your code and a random ID for your browser, and nothing else.
- We never sell your information.
1. Who we are
Pewterham is a trading name of Deshenvale Ltd, a company registered in Scotland (company number SC900494), registered office 48 West George Street, Glasgow, Scotland, G2 1BP. We make the Pewterham apps and books sold on this site, and we are the data controller for the information this notice describes. Write to us at [email protected] or at our registered office.
2. When you visit this website
This website sets no cookies of its own and runs no advertising or tracking. Like every website, it is delivered by a hosting service (Cloudflare), which handles your IP address and browser details to send you the pages and to protect the site from attacks; we don't keep them. Cloudflare handles them under its own privacy policy.
Counting presses. We count how many times a day the Buy, Etsy and Try buttons are pressed on each page, to learn which ones people use. A press sends only the page's name and the button's name; we keep only each day's totals, in a database at Cloudflare. Nothing about you or your device is sent or kept, and no cookie is set.
Prices. Until our checkout opens, the pages show our prices in US dollars and ask no one for them. Once it opens, the home and the product pages ask Paddle for the price in your currency and with your tax when they open; Paddle then sees your IP address to work out your country, under its own privacy notice.
Trying an app. When you try an app on its page, what you type is saved in your own browser's storage, on your device. It is never sent to us. Clearing your browser's data deletes it.
3. When you buy on this website
Our checkout is run by Paddle (Paddle.com Market Limited; in the United States, Paddle.com Inc.; in Canada, Paddle.com (Canada) Ltd), which sells our apps and books to you as our reseller. Paddle collects your payment details and billing address and is the data controller for them, under its own privacy notice. We never see your card details.
Paddle tells us your name, email address, country, order number, what you bought and the price, and we keep how many times your order's files were downloaded. We use them to:
- send your download and, for an app, your activation code, and help you if something goes wrong (the lawful basis: our contract with you);
- keep the sales records UK tax law requires (the lawful basis: a legal obligation);
- stop a code or a download link being used against the licence, for example after a chargeback (the lawful basis: our legitimate interest in protecting our work).
Your activation code is emailed to you from [email protected], whose mailbox is hosted by Purelymail. Once codes are sent automatically, they go through Resend, an email delivery service, which keeps a record that each was sent.
4. When you buy on Etsy
If you buy one of our apps or books on Etsy, Etsy's own privacy policy covers your purchase. Etsy gives us your name, your order number and the messages you send us, and, for an app, we send your activation code by Etsy message. We use them for the same three reasons as above.
5. When you activate an app
When you activate, move or remove one of our apps, and when it checks in (at most once a day, when you're online), it sends our activation service your activation code (which includes your order number), a random ID made for your browser, and which app it is. We keep those, the code's status (active, moved, removed or reset) and the dates, and never your name, your email address or anything you make. The service runs on Cloudflare, which sees your IP address to deliver each request; we don't keep it.
We use this to provide your licence and to stop it being shared (the lawful bases: our contract with you, and our legitimate interest in protecting our work).
6. When you write to us
If you email us, we keep the conversation so we can help you, and in case you write again. Our mailboxes are hosted by Purelymail.
7. Who we share it with
Only with the services that do the work for us, and only what each one needs: Paddle (prices, checkout, tax, receipts and refunds), Cloudflare (this website, its daily counts, and the activation service, which also delivers the files you buy here), Purelymail (our email), Resend (codes and download links sent automatically), and Etsy for Etsy orders. Our accountant and HMRC see our sales records when the law requires. We never sell your information, and we never use it for advertising.
8. Transfers outside the UK
Some of these services handle your information in the United States. Cloudflare and Resend are certified under the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), which UK law recognizes as protecting it, and Resend also signs the UK's approved contract clauses with us. Paddle and Etsy protect their own transfers as their privacy notices describe. Purelymail, which hosts our mailboxes, keeps our email in the United States; we have asked it to sign the UK's approved contract clauses, and if it doesn't, we will move our email to a service that does.
9. How long we keep it
| What | How long |
|---|---|
| Sales records (name, order number, what you bought, the price) | 6 years after the end of the financial year of the sale, as UK tax law requires |
| Activation records of a computer | 400 days after that computer stops using your code; we keep only the latest record of each code |
| Emails with us | 2 years after our last message, unless they're part of a sales record |
| What you type when you try an app | We never have it: it stays in your browser until you clear it |
10. Your rights
You can ask us for a copy of the information we hold about you, and ask us to correct it, delete it, restrict how we use it, or send it to you in a format you can reuse. You can object to anything we do on the basis of our legitimate interests. Write to us at the address in section 1; it costs nothing, and we reply within a month. Some records, such as sales records, we must keep for as long as the law requires.
11. Complaints
If you're unhappy with how we've handled your information, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or 0303 123 1113.
12. Changes
If we change this notice, we'll update the date at the top. If a change matters to you, for example a new use of your information, we'll tell you before it happens.