Privacy

Last updated: October 2026

Who’s responsible

Northloop ([TRADING NAME / LEGAL NAME], [BUSINESS ADDRESS]) is the data controller for The Blacklist shop. Contact: hello@northloop.me.uk.

What we collect and why

• Your order: your name, email address, what you bought, what you paid and when. We use it to deliver your downloads, email your link, help if something goes wrong, and keep the accounts HMRC requires. The legal basis is performing our contract with you and our legal obligations.
• Payment: card details go directly to Stripe, which processes your payment under its own privacy policy. We don’t see or store your card number.
• Technical logs: our host keeps standard server logs (such as IP address and pages requested) for security, for a short time.
• Your basket: what’s in your basket is saved in your own browser so it’s still there if you come back. It isn’t sent to us until you check out.

We don’t sell your data, and we don’t send marketing emails unless you’ve asked to hear from us.

Cookies

The shop doesn’t use advertising or tracking cookies. Stripe’s checkout page may set cookies it needs to process payments safely and prevent fraud.

Who we share it with

Stripe (payments), our web host 123-reg (hosting and email), and our accountant or HMRC where the law requires.

How long we keep it

Order records are kept for six years for tax purposes, then deleted. Download records expire after 30 days.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it where we don’t need to keep it by law. Email hello@northloop.me.uk. If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.