Effective and last updated: 26 August 2026
1. Controller and contact
EDRIVE Design Limited, trading through EDDI, is the controller for the processing described here. Contact enquiries@eddesign.co.uk with privacy questions or requests.
2. Data we use
We use account and identity details; contact details; order, price, tax, payment-status and entitlement records; licence acceptance records; download, access, device, browser, security and approximate network information; support correspondence; and the purchaser identifiers embedded in a delivered copy. Stripe processes payment-card details; we do not receive your full card number.
3. Purposes and lawful bases
We process data to create and administer your account, take payment, deliver and support the publication, record the licence you accepted and meet contractual obligations. We also process records where necessary to meet tax, accounting, consumer-protection and other legal obligations. Our legitimate interests support service security, fraud prevention, intellectual-property protection, audit, dispute handling and improvement of reliable access, balanced against your rights.
4. Sharing and international processing
We share only what is necessary with service providers supporting payments, cloud hosting, identity, email, security and professional advice, including Stripe and Google Cloud. Some providers may process data outside the United Kingdom using applicable legal safeguards. We may disclose information where law requires it or to establish, exercise or defend legal claims.
5. Retention and security
Account and entitlement data are kept while access remains active and for a reasonable period afterwards. Transaction and tax records are normally retained for six years or longer if law, a dispute or an investigation requires it. Security and access logs are retained only as long as reasonably necessary for their purpose. We use access controls, encryption and audit measures appropriate to the data, but no system can guarantee absolute security.
6. Your rights
Depending on the circumstances, you may ask for access, correction, erasure, restriction or portability, and may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Rights can be limited by law, including where records must be retained.
You may complain to us first, and you also have the right to complain to the UK Information Commissioner’s Office. See ico.org.uk/make-a-complaint ↗.
7. Required information and automated checks
Identity, contact and payment information are required to enter and perform the purchase contract. Without them we cannot supply protected access. Automated fraud or payment checks may delay or prevent checkout; contact us if you believe a decision is incorrect.
8. Updates
We will update this notice when our processing materially changes and will bring significant changes to account holders’ attention where required.