1. Who is responsible for your data

DRILLPITCH is the data controller for personal data collected through this site. Contact us via the contact form for any privacy request.

2. This site is for adults

Accounts and purchases are restricted to adults aged 18 or over. We do not knowingly collect personal data from children. Our products are used by children offline, under adult supervision, but no child data is collected by this site. If you believe a child has created an account, contact us and we will delete it.

3. What we collect and why

• Account data — email address and password (stored encrypted by our authentication provider, Supabase), used to give you access to your purchased packs. Legal basis: contract.
• Purchase data — what you bought, when, the amount and currency, linked to your account so your library works. Legal basis: contract.
• Payment data — handled entirely by Stripe. We never see or store your full card details. Stripe may determine your approximate location to show prices in your local currency. Legal basis: contract and Stripe's own legitimate interests. See Stripe's privacy policy.
• Contact messages — your name, email, and message when you use the contact form, so we can reply. Legal basis: legitimate interest.
• Technical data — our hosting provider (Netlify) processes IP addresses in server logs to deliver and secure the site. Legal basis: legitimate interest.

4. Translations and read-aloud

Translated versions of pack content are stored on our systems and loaded like any other page content; nothing is sent to a translation service when you read. Read-aloud uses your own device's built-in speech engine; no audio is sent to us.

5. Who we share data with

We use trusted processors to run the site: Stripe (payments), Supabase (accounts and purchase records), and Netlify (hosting and contact form delivery). We do not sell your personal data, and we do not share it with anyone else except where required by law.

6. International transfers

Some of our providers process data outside the UK. Where they do, transfers are protected by UK-approved safeguards such as the UK Extension to the EU–US Data Privacy Framework or standard contractual clauses.

7. How long we keep data

Account and purchase records are kept while your account is active so your library keeps working, and for up to 6 years afterwards where needed for tax and accounting law. Contact messages are kept only as long as needed to deal with your enquiry.

8. Your rights

Under UK GDPR you can ask us for a copy of your data, ask us to correct or delete it, object to or restrict processing, and ask for your data in a portable format. Contact us to exercise any right. You can also complain to the Information Commissioner's Office (ico.org.uk).

9. Cookies

We use only essential cookies and local storage needed to keep you signed in to your account. We do not use advertising or cross-site tracking cookies.

10. Changes

We will post any changes to this policy on this page with an updated date.