Privacy Policy

This policy explains how Beige Threat handles personal data when you use the site, contact support, download products, purchase plugins, recover a licence, or book a repair.

Beige Threat is operated by Lewis Flude in Margate, Kent. For privacy questions or requests, contact contact@beigethreat.com.

Information collected

Depending on how you use the site, Beige Threat may collect:

• contact details you send by email or support form;
• purchase and licence details such as order reference, transaction ID, email address, customer name, and issued licence key;
• technical and usage data such as IP address, browser, device, referring page, and pages visited;
• download event information used to understand which files are being accessed.

How the information is used

Beige Threat uses personal data to:

• provide the site, downloads, purchases, and licence recovery;
• fulfil plugin purchases and issue licence materials;
• respond to support and refund requests;
• maintain security, prevent abuse, and troubleshoot problems;
• understand product interest and site usage.

Legal bases

Where applicable, Beige Threat processes personal data because it is necessary to perform a contract with you, to comply with legal obligations, and for legitimate interests such as operating and securing the site, supporting customers, and keeping purchase records.

Workshop customers

When you ask for a repair or setup, I keep:

• your name, email address, and phone number if you give one;
• your postal address, if I'm sending something back to you;
• what the item is, the fault, and any photos you send;
• the quote, what I did, the parts used, and what you paid.

I use this to quote, do the work, return the item, provide the guarantee, and keep the accounts the law requires. The legal bases are performing our contract and, for accounts, complying with tax law.

Your name and address go to the courier when I post an item back. Emails go through my email provider. Nobody else sees them.

Job and payment records are kept for 6 years after the job is finished. That covers the guarantee, HMRC's record-keeping rules (at least 5 years after the 31 January Self Assessment deadline for that tax year) and the time limit for contract claims. Photos and emails that aren't part of that record are deleted 12 months after the job is finished.

Payments and Paddle

Paid checkout is provided by Paddle. When you buy a paid product, Paddle acts as merchant of record and processes payment information on its own systems. Beige Threat receives the order details needed to fulfil the purchase, such as your name, email address, transaction ID, and product details.

Paddle's handling of your data is governed by Paddle's own privacy materials and checkout terms.

Hosting, storage, and analytics

The site is hosted on Cloudflare infrastructure. Licence records and related fulfilment data are stored using Cloudflare services used by the site.

The site also uses Plausible Analytics and basic event tracking to measure page visits and download activity.

Sharing

Beige Threat does not sell your personal data. Personal data may be shared with service providers that help operate the site and fulfil purchases, including hosting, storage, payment, analytics, and email providers, where needed for those services.

Retention

Personal data is kept only for as long as reasonably necessary for the purpose it was collected, including fulfilment, support, security, recordkeeping, and legal or tax obligations. Purchase and licence records may be retained for longer where needed to support legitimate recovery and audit needs.

Your rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or data portability. To make a request, email contact@beigethreat.com.

If you're unhappy with how your data has been handled, you can complain to the Information Commissioner's Office at ico.org.uk. I'd appreciate the chance to put it right first.

International processing

Service providers used by Beige Threat may process data in countries outside your own. Where this happens, reasonable steps are taken to use providers and transfer mechanisms intended to protect personal data.

Changes

This policy may be updated from time to time. The version on this page is the current version.