This notice explains how personal data is handled on this website. It is maintained by Andy Rowe and describes current practice — it is not an independent audit or certification.
1. Who is responsible for your data
Andy Rowe, trading as The Buy-to-Let Playbook, United Kingdom, is the data controller for personal data collected through this website. Contact: enquiries@andirowe.com.
Registered with the UK Information Commissioner’s Office (ICO). Registration reference: ZC212785.
2. What we collect and why
Email address (free sample sign-up)
Collected when you request the free sample. Used to deliver the sample and, where you have not opted out, to send occasional updates about the Playbook. Legal basis: consent, and legitimate interests in marketing our own similar content to people who have requested it.
Purchase and order data
When you buy, your name, email, billing country and payment details are collected and processed by Paddle as Merchant of Record. We receive order confirmations and limited customer details — we never see or store your full card number. Legal basis: performance of a contract, and legal obligation for tax and accounting records.
Support correspondence
If you email us, we keep the message and your contact details to answer you and keep a record. Legal basis: legitimate interests in providing support.
Technical and security data
Our hosting and backend platforms process standard request data such as IP address, browser type and timestamps to serve pages and protect against abuse. Legal basis: legitimate interests in operating a secure service.
3. Who we share data with
- Paddle.com — Merchant of Record for all orders: payment processing, subscription and order management, invoicing, tax compliance and refunds.
- Lovable Cloud (hosting and database) — hosts this website and stores the sample sign-up list on our behalf.
- Professional advisers — accountants and legal advisers where necessary.
- Authorities — where disclosure is required by law.
We do not sell your personal data or share it with third parties for their marketing.
4. International transfers
Some of our providers process data outside the UK/EEA. Where that happens, transfers are made under appropriate safeguards such as UK/EU Standard Contractual Clauses or an adequacy decision.
5. How long we keep it
- Sample sign-up emails: retained until you unsubscribe or ask for deletion, and reviewed periodically for inactivity.
- Order and transaction records: retained for at least six years to meet UK tax and accounting obligations.
- Support correspondence: retained for up to two years after the matter is closed.
Data is deleted or anonymised once it is no longer needed for these purposes.
6. Cookies and analytics
Cookies and equivalent storage on this site fall into three categories. Strictly necessary cookies keep the site working and secure, remember your cookie choice and allow a purchase to be completed; these are used without consent because the site cannot function without them. Analytics cookies help us see which pages are read and where readers lose interest. Marketing cookies measure our advertising.
No analytics or marketing cookies are set unless and until you consent to them. You are asked on your first visit, and you can change or withdraw your choice at any time using the Cookie preferences link in the footer of any page. Withdrawing consent is as easy as giving it, and non-essential cookies already set are cleared when you do. You can also block or delete cookies in your browser settings.
7. Security
We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls on the sign-up list so it cannot be read from the public website, and restricted administrative access. No system can be guaranteed completely secure.
8. Your rights
Under UK GDPR you have the right to access your data, have it corrected or erased, restrict or object to processing, request portability, and withdraw consent at any time. Every marketing email includes an unsubscribe link.
To exercise any right, email enquiries@andirowe.com. We respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
9. Changes
We may update this notice from time to time. The date at the top of this page shows when it was last revised.