Privacy Policy.

1. Who is responsible for your data

Crislondon (company details at the end of this page) is the data controller for the personal data described on this page.

For anything to do with your data, email info@crislondon.com or call 020 4524 0238.

2. What we collect

• Your name and email address, as you give them at checkout. The email address is how your access reaches you.
• Your purchase record: what you bought, when, the amount, and the Stripe reference for the payment.
• Limited billing details, such as the country and postcode your card is registered to, which Stripe collects to take the payment and to check it for fraud.
• Anything you write to us, if you email us with a question or a problem.

Card details never touch this website. Your card number, expiry date and security code are entered on a checkout page operated by Stripe and go directly to Stripe. We never see them, and they are never stored on this site or on our systems.

3. If you apply for the mentorship

The application form on our mentorship page is the only form on this site. If you fill it in, we collect your name, your email address, your Telegram handle, how long you have been trading gold, the length you say you would prefer, whatever you write in the message box, and whether you accepted the Mentorship Terms and when. Nothing else is collected with it: the form asks for no payment details, and applying costs nothing.

We use it for one thing, which is to consider your application and to get back to you about the mentorship. Your application is emailed to us and stored on our systems so we can answer it. Lawful basis: our legitimate interests in dealing with an enquiry you chose to send us, and, if we go on to work together, the steps you asked us to take before entering into a contract.

Applying does not put you on a mailing list. We will not use your details to market anything to you, and we will not pass them to anyone else. The only messages you get are our reply and the confirmation the form sends you.

We keep an application until it is resolved, one way or the other, and for a short period afterwards in case you come back to us. If you are accepted, your details are then held as part of the mentorship itself. You can ask us to delete your application at any time, before or after we have replied, by emailing info@crislondon.com, and we will.

4. What we do not collect

This site has no accounts, no login and no password. Apart from the mentorship application form described above, it has no contact form, no comment box and no newsletter to join. It sets no cookies of its own, and there is no advertising, no tracking pixel and no third party embed on any page. Even the fonts are served from this site’s own domain rather than a font service. The one thing we do measure is described in section 5, and it identifies nobody.

Two things are worth stating plainly rather than leaving out:

• Hosting. Like any website, ours is served by a hosting provider, which necessarily receives the technical information every web request carries (including your IP address and browser type), and may keep short lived logs of it for security and reliability.
• Stripe Checkout. When you go to pay, you are on a page operated by Stripe. Stripe sets its own cookies there, which it needs to process the payment and to prevent fraud. That processing is Stripe’s, not ours, and is governed by Stripe’s privacy policy.

5. What we measure about visits

We use Vercel Web Analytics to count visits and to see which pages people actually read. It is part of our hosting rather than an outside service: the small script that does the counting is served from this site’s own address, and what it sends goes to Vercel and no further. Everything it collects is anonymised.

What it records about a visit is the page you viewed, the page or search that sent you to it, the country you are in, and the broad type of device and browser you used. It sets no cookies, it stores nothing on your device, and it gives you no identifier that follows you from one visit to the next or on to any other website. There is no cross site tracking. We see totals and trends, never a person.

We use it for one thing, which is to understand which pages are worth improving. It is never used for advertising, it is never sold or shared, and it is not joined up with your purchase, your email address or a mentorship application. Vercel processes it for us as our hosting provider, the same role it already has in section 7. Lawful basis: our legitimate interests in understanding how our own website is used, which weighs lightly because nothing here identifies you.

6. Why we use it, and our lawful basis

• To sell and deliver The Goldprint: taking payment, sending your access links and your receipt, and answering your questions. Lawful basis: performance of our contract with you.
• To keep accounting and tax records of the sale. Lawful basis: our legal obligations under UK tax and company law.
• To protect The Goldprint and the business: preventing fraud and link sharing, and keeping enough of a record to deal with a dispute or a legal claim. Lawful basis: our legitimate interests, weighed against your rights.

We do not use your data for marketing. You are not added to a mailing list. We do not sell, rent or pass your details to anyone for their own marketing. The only emails we send you are about what you bought: your access links, your receipt, a reply to your message, or a note that new videos have been added, which is part of what you paid for.

7. Who else processes it

• Stripe takes and processes your payment. Stripe also handles your card data for its own fraud prevention and legal obligations, for which it is responsible in its own right. We receive the confirmation and the limited details in section 2.
• Our hosting provider (Vercel) serves this website, and provides the anonymised visit statistics described in section 5.
• Our email provider ([email delivery provider, to be confirmed]) sends your access links and receipts, and carries a mentorship application from the form to us.

We do not share your data with anyone else, except where the law requires it, for example a valid request from HMRC, the police or a court.

8. Where your data is held

Our providers may store or process data outside the United Kingdom. Where they do, the transfer has to be covered by safeguards recognised under UK data protection law, such as UK adequacy regulations or the International Data Transfer Agreement (or the UK Addendum to the standard contractual clauses).

9. How long we keep it

• Sales, payment and tax records: at least six years after the end of the financial year they fall in, because UK tax and company law requires it.
• Your purchase and email address: for as long as you have access. Access lasts for as long as we make The Goldprint available, so we have to be able to tell that you are entitled to it.
• Mentorship applications: until the application is resolved and for a short period afterwards, then deleted, or sooner if you ask us to. See section 3.
• Support emails: while the matter is open and for a reasonable period afterwards, then deleted.
• Server logs: a short period set by our hosting provider, for security and reliability.

10. Your rights

Under the UK GDPR you have the right to:

• ask what personal data we hold about you and get a copy of it;
• have anything inaccurate corrected;
• ask us to delete it, though we may have to keep what tax law requires, and deleting your purchase record ends your access to The Goldprint;
• ask us to restrict how we use it, or object to processing we do on the basis of legitimate interests;
• ask for a copy of the data you gave us in a portable, machine readable form.

We do not make any decision about you by automated means, and we do not profile you. To use any of these rights, email info@crislondon.com. It is free, and we will respond within one month.

11. Children

The Goldprint is sold to adults: you must be at least 18 to buy it. We do not knowingly collect personal data from children.

12. Complaints

If you think we have handled your data badly, please tell us first at info@crislondon.com and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk.

13. Changes to this policy

If we change how we handle your data, for example when we confirm the providers named in section 7, we will update this page and change the date at the top of it.

14. Related pages

Terms of Service · Refund Policy · FAQ

15. Company details

Crislondon is the trading name of Chrome Digital Enterprise Ltd, a company registered in England and Wales. Company number: 17338831. Registered office: 167-169 Great Portland Street, London, England, W1W 5PF.