Privacy Policy

Who we are

Valuation Studios sells digital research workflows and sector playbooks to investors, financial professionals, and researchers. This policy explains what personal data we collect when you visit or buy from valuationstudios.com, how we use it, and the rights you have over it.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Valuation Studios is the data controller of the personal data described in this policy.

What we collect

We collect the minimum personal data required to take payment, deliver your purchase, and meet our legal obligations. Specifically:

• —Email address. Provided by you at Stripe Checkout. Used to send the purchased prompt file and any related correspondence.
• —Payment information. Card number, expiry, CVC, billing address, and country of residence are collected and processed by Stripe. We never see or store your card details. Stripe shares with us a redacted summary (last four digits, card brand, billing country) for receipt and dispute purposes only.
• —Order metadata. Stripe session identifier, product purchased, amount paid, currency, and timestamps. Stored in our database against your email address for the purposes of fulfilment, support, and accounting.
• —Watermark data. Each delivered file includes a header containing your email address, purchase timestamp, and order identifier. This is for licence traceability only and is never disclosed to third parties.

We do not use cookies, tracking pixels, analytics scripts, advertising networks, or session recording tools. We do not maintain user accounts. We do not collect your name, address, phone number, IP address logs, or browsing behaviour beyond what your browser and our hosting providers transmit incidentally to serve the site.

Why we use it

We process the data described above on the following legal bases:

• (a)Performance of contract. Processing your payment, delivering the prompt file by email, and providing customer support are all necessary to fulfil the purchase contract you enter into at checkout.
• (b)Legal obligation. Retaining transaction records for tax, accounting, and anti-money-laundering purposes.
• (c)Legitimate interests. Fraud prevention, dispute resolution, enforcement of the licence terms (including watermarking), and securing our infrastructure.

Who we share it with

We do not sell, rent, or trade personal data. We share the minimum data necessary with the following service providers, each of whom acts as a data processor on our behalf:

• —Stripe. Payment processing. Stripe receives the data described above and processes it under its own privacy policy at stripe.com/privacy.
• —Resend. Transactional email delivery. Resend receives your email address and the prompt file attachment for the sole purpose of delivery. Privacy policy at resend.com/legal/privacy-policy.
• —Railway. Backend application hosting and database storage. Order records are stored on Railway infrastructure.
• —Vercel. Frontend website hosting. Vercel handles incoming web requests and may log standard HTTP metadata (IP address, user agent, request path) for operational purposes.

We may also disclose personal data when required by law, regulation, court order, or to enforce our terms of service or protect our rights.

International transfers

Some of our processors (notably Stripe, Resend, and Vercel) may store or process data in the United States or other jurisdictions outside the UK and European Economic Area. Where this occurs, we rely on Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent safeguards approved by the UK Information Commissioner's Office (ICO) to ensure your data receives an equivalent level of protection.

How long we keep it

Order records (including email address, product purchased, and transaction metadata) are retained for a minimum of six years from the date of purchase, in line with HMRC record-keeping requirements. After that period we may delete or anonymise the records.

Email correspondence is retained for as long as is necessary to resolve the matter and for a reasonable period thereafter for reference.

Your rights

Under the UK GDPR you have the right to:

• —request a copy of the personal data we hold about you (the right of access);
• —ask us to correct inaccurate or incomplete data (the right to rectification);
• —ask us to erase your personal data, subject to our legal obligation to retain transaction records (the right to erasure);
• —ask us to restrict or object to certain processing;
• —receive a portable copy of your data in a commonly used machine-readable format (the right to data portability);
• —lodge a complaint with the UK Information Commissioner's Office at ico.org.uk if you believe we have mishandled your personal data.

To exercise any of these rights, email us at the address below. We will respond within one month of receiving a verifiable request.

Security

All traffic to and from this site is encrypted in transit using TLS. Payment data is handled exclusively by Stripe under PCI-DSS Level 1 certification and never touches our servers. Backend infrastructure runs on managed cloud providers with industry-standard access controls, network isolation, and at-rest encryption. Despite these measures, no system is perfectly secure; we cannot guarantee absolute protection against unauthorised access.

Children

The Tools are intended for sophisticated investors, financial professionals, and researchers. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted personal data to us, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices, the services we use, or applicable law. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated by email to active customers where reasonably practicable.

Contact

For questions about this policy, requests to exercise your rights, or any privacy-related concern, email support@valuationstudios.com.