Privacy Policy — Kieran Drew Enterprise
Last updated: October 2, 2025
Who we are
Kieran Drew Enterprise (“we”, “us”, “our”). Website: https://kierandrew.com. Controller: Kieran Drew Enterprise. Registered address: DANIELS HOUSE, SWEET STREET, LEEDS, Yorkshire LS11 9ER. Contact: kieran@kierandrew.com.
What this policy covers
How we collect, use, share, store, and protect personal data when you visit our sites, buy digital books/courses, or interact with us. Applies to UK/EU users (UK GDPR/EU GDPR) and all other users.
What we collect
- Identifiers & contact: name, email, address, phone.
- Account & purchase data: login, orders, downloads, invoices, refunds.
- Payment: last-4 and tokens via our payment processors (we don’t store full card data).
- Usage & device: IP address, browser, OS, pages viewed, clicks, approximate location.
- Marketing & comms: preferences, opens/clicks, opt-in consent records.
- UGC: comments, reviews, support messages.
- Social/login data (if you connect): profile basics per your settings.
How we collect it
- Directly from you (forms, checkout, email/support).
- Automatically (cookies, pixels, logs).
- From third parties (payment processors, analytics/ads platforms, social logins).
Lawful bases (UK/EU)
Contract (to provide what you purchased).
Consent (email marketing, certain cookies).
Legitimate interests (site security, analytics, improving services, remarketing within expectations).
Legal obligation (tax/records, fraud prevention).
How we use data
- Provide and support our services, orders, accounts, downloads.
- Customer service and transactional messages.
- Improve site, content, and security (debugging, preventing abuse).
- Marketing with consent/legitimate interest (you can opt out anytime).
- Compliance (tax, accounting, legal claims).
Media
Avoid uploading images with embedded location (EXIF GPS). Visitors may download and extract location data from images.
Cookies & similar tech
- Essential (login, security, checkout).
- Preferences (remember settings).
- Analytics/Performance (e.g., Google Analytics).
- Advertising/Remarketing (e.g., Meta Pixel, Google Ads) to show relevant ads based on site activity. You can control cookies in your browser or via our cookie banner (where shown). If you reject cookies, some features may not work. We currently do not respond to “Do Not Track” signals.
Login/session cookies (examples): temporary login test cookie; login cookies (≈2 days), screen options (≈1 year), “Remember Me” (≈2 weeks); edit/publish cookie (≈1 day). Commenter convenience cookies may last ≈1 year.
Embedded content
Articles may include embedded content (videos, images, etc.). Embedded content behaves as if you visited the other site, which may collect data, use cookies, and track your interaction.
Who we share data with
- Processors/Service providers: hosting, email/SMS, analytics, payments, fraud/security, fulfillment of digital delivery, customer support, spam detection.
- Advertising & analytics partners: to measure performance and (where permitted) personalize/retarget ads.
- Professional advisers & authorities: where required by law or to protect rights.
- Business transfers: in a merger, sale, or similar. We do not sell your personal data.
International transfers
We may transfer data outside the UK/EU (e.g., to the US). Where we do, we use appropriate safeguards (UK/EU Standard Contractual Clauses or equivalent) and apply security controls.
Security
We use administrative, technical, and physical safeguards (encryption in transit, access controls, firewalls). No system is 100% secure.
Retention
- Account, order, and tax records: typically 6–7 years (legal obligations).
- Marketing data: until you unsubscribe or your consent is withdrawn, then limited suppression retained.
- Comments/UGC: retained indefinitely to auto-approve follow-ups.
- Logs/analytics: kept for the shortest period necessary for the stated purposes.
Your rights
- Access, rectification, erasure, restriction, portability, and objection (including to direct marketing).
- Withdraw consent at any time (does not affect prior processing).
- Lodge a complaint with your data protection authority (e.g., ICO in the UK). To exercise rights: kieran@kierandrew.com (we’ll verify your identity).
Your choices
- Marketing: unsubscribe via any email footer or email us.
- Cookies: adjust browser settings and/or our cookie banner.
- Account: view/update data in your profile or contact us to request deletion (subject to legal retention).
Children
Our services are for adults (age of majority). We do not knowingly collect data from children under 13. If you believe we have, contact us and we’ll delete it.
Social features & sharing
If you use social logins/sharing, data is handled per that platform’s policies and your settings. Public posts/comments may be re-shared by others.
Automated decisions / profiling
We may use limited profiling for segmentation and ad relevance (e.g., page visits, purchases). No decisions with legal or similarly significant effects are made solely by automated means.
Third-party links
We’re not responsible for the privacy practices/content of third-party sites. Review their policies.
How long we retain your data
- Comments: indefinitely (and metadata) to recognize/auto-approve follow-ups.
- Registered users: we store profile information indefinitely; admins can see/edit (except password); users can see/edit (except username & password).
What rights you have over your data
If you have an account or have left comments, you can request an exported file of your personal data and/or request erasure (excluding data we must keep for admin, legal, or security purposes).
Contact
Email: kieran@kierandrew.com
Address: DANIELS HOUSE, SWEET STREET, LEEDS, Yorkshire LS11 9ER
Change Control
We may update this policy from time to time. The latest version will always be posted here with the “Last updated” date. Continued use of our services means you accept the updated policy.