Privacy Policy

This policy explains how CCSM Digital Ltd collects, uses and protects your personal data when you use thiswasntheplan.co.uk. We take your privacy seriously and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Data Controller: CCSM Digital Ltd

Registered address: 167–169 Great Portland St, London W1W 5PF

Website: thiswasntheplan.co.uk

Contact email: [email protected]

If you have any questions about how we handle your personal data, please contact us at the email address above.

2. What data we collect

We collect the following personal data:

• Email address — when you use a free tool that requires an email address to receive a download link, or when you subscribe to our email list voluntarily.
• Name — if you voluntarily provide it via a contact form or email subscription.
• Contact form submissions — any information you choose to include in a message sent via our contact form.
• Technical data — standard website analytics data including IP address, browser type, pages visited and time on site. This is collected automatically and is used only in aggregate, anonymised form.

We do not collect payment card details. All purchases are processed by Payhip, a third-party payment processor. Please refer to Payhip's privacy policy for information about how they handle your payment data.

3. How we use your data

We use your personal data for the following purposes:

• To deliver free tool downloads — your email address is used to send you the download link you requested. This is the specific purpose for which you provided it.
• To send email communications — if you have consented, we may send you useful content, updates and information about our products via our email marketing platform (Kit, formerly ConvertKit).
• To respond to contact form enquiries — we use the information you provide to respond to your message.
• To improve the website — aggregated, anonymised analytics data helps us understand how people use the site and improve it.

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Legal basis for processing

Under UK GDPR, we process your personal data on the following legal bases:

• Consent — for email marketing communications. You can withdraw this consent at any time by clicking the unsubscribe link in any email we send, or by contacting us directly.
• Legitimate interests — for delivering the download you requested via the tool gates, and for website analytics. Our legitimate interest is to operate and improve the website and its services.
• Contract performance — if you purchase a product, we process data necessary to fulfil that contract (your email address to deliver the download).

5. Who we share your data with

We use the following third-party services that may process your personal data on our behalf:

• Kit (formerly ConvertKit) — our email marketing platform. Email addresses collected via tool download gates and voluntary subscriptions are stored and processed by Kit. Kit is based in the United States. Data transfers are subject to appropriate safeguards under UK GDPR. Kit's privacy policy is available at kit.com/privacy.
• Payhip — our payment and digital product delivery platform. Payhip processes purchase transactions and delivers digital downloads. Payhip's privacy policy is available at payhip.com/privacy.
• WordPress hosting provider — the infrastructure on which the website runs. Standard server logs may be retained in accordance with their privacy policies.

We do not share your data with any other third parties except where required by law.

6. How long we keep your data

• Email addresses (marketing) — retained until you unsubscribe or request deletion.
• Contact form submissions — retained for up to 24 months, or until you request deletion.
• Analytics data — aggregated and anonymised; no individual retention period applies.

7. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to ask us to correct inaccurate data.
• Right to erasure — to ask us to delete your personal data in certain circumstances.
• Right to restrict processing — to ask us to limit how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.

8. Cookies

This website uses cookies. Cookies are small text files placed on your device by your browser when you visit a website.

• Strictly necessary cookies — required for the website to function. These cannot be disabled.
• Analytics cookies — used to collect anonymised information about how visitors use the site. You can opt out of these via your browser settings.

You can control cookies through your browser settings. Disabling cookies may affect the functionality of some parts of the website.

9. Security

We take reasonable steps to protect your personal data from unauthorised access, loss or disclosure. The website is served over HTTPS. However, no method of transmission over the internet is completely secure and we cannot guarantee absolute security.

10. Children

This website is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this privacy policy from time to time. The date at the top of this page shows when it was last updated. We encourage you to review it periodically. Continued use of the website after changes constitutes acceptance of the updated policy.

12. Contact us

The Blog

Real answers to the questions you’re Googling at 2am. Written by someone who’s been through it, not a law firm trying to get your business.

START READING →

The Blog

Real answers to the questions you’re Googling at 2am. Written by someone who’s been through it, not a law firm trying to get your business.

START READING →