Privacy Policy

This Privacy Policy explains how Union of Two ("we", "us") collects and uses personal data when you use unionoftwo.com. We are the data controller for this data under the UK GDPR and the Data Protection Act 2018.

What we collect

• Account data: your name, email address, password (stored encrypted) and, if you sign in with Google, your Google account ID and profile picture.
• Order data: what you bought, the amount, tax, your billing country and postal code, and the date and time you agreed to immediate delivery.
• Payment data: processed directly by Stripe. We never receive or store your full card details.
• Technical and security data: IP address, browser type, login times and download history. We use this to protect your account and our Product against unauthorised sharing.
• Analytics: if you accept analytics cookies, Google Analytics collects information about how you use the Site.
• Messages: anything you send us through the contact form or by email.

Why we use it (legal basis)

• To create your account, deliver the Product and provide support — performance of a contract.
• To keep accounting and tax records — legal obligation.
• To prevent fraud, abuse and unauthorised sharing — legitimate interests.
• To send a single reminder if you leave checkout without paying — legitimate interests; you can unsubscribe at any time.
• Analytics cookies — your consent, which you can withdraw at any time.

Who we share it with

We share data only with providers who help us run the Site: Stripe (payments and tax), Brevo (email delivery), Google (sign-in and, with consent, analytics), Cloudflare (security) and our hosting provider. Some providers may process data outside the UK; where they do, appropriate safeguards such as the UK International Data Transfer Addendum are in place.

How long we keep it

We keep account data while your account is open. If you close your account, we keep order and invoice records for at least six years to meet UK tax law, and security logs for up to 12 months. Everything else is deleted or anonymised.

Your rights

You have the right to access, correct, delete or restrict the use of your data, to object to processing, and to data portability. To exercise these rights, email [email protected]. You can also complain to the Information Commissioner's Office (ico.org.uk).

Cookies

See our Cookie Policy.

Changes

We will post any changes to this policy on this page.