Privacy Policy

Last updated: 20 March 2026 · Applies to doxly.co.uk · UK GDPR compliant

1. Who We Are

Doxly is operated as a sole trader business trading as Doxly, based in Stockport, SK2 5QB, England. We are the data controller for all personal data collected through doxly.co.uk.

Contact us at: [email protected]

2. What Data We Collect

When you purchase a document

• Email address — to send your download link and order confirmation
• Payment information — handled entirely by Stripe. We never see or store your card details
• Document details — the information you enter into our generators (name, address, etc.) to personalise your document

When you subscribe

• Email address and payment information as above
• Subscription status and billing history (held by Stripe)

Automatically collected data

• Server logs — IP address, browser type, pages visited, timestamps. Used for security and debugging only
• Cookies — see our Cookie Policy

3. How We Use Your Data

Purpose	Legal Basis
Sending your download link	Contract performance
Processing payment	Contract performance
Managing your subscription	Contract performance
Security and fraud prevention	Legitimate interests
Legal compliance	Legal obligation

We do not use your data for marketing without your explicit consent. We do not sell your data to third parties.

4. Who We Share Data With

• Stripe — payment processing. Stripe is PCI DSS compliant. See Stripe's Privacy Policy
• Google (Gmail) — used to send transactional emails (download links, receipts)
• Cloudflare — DNS and CDN. May process your IP address as part of routing

We do not share your personal data with any other third parties.

5. How Long We Keep Your Data

• Email and purchase records — 7 years (legal requirement for financial records)
• Download tokens — 24 hours, then automatically deleted
• Server logs — 30 days
• Subscription data — held by Stripe for the duration of the subscription plus 7 years

6. Your Rights

Under UK GDPR you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data (subject to legal retention requirements)
• Restriction — request we limit how we use your data
• Portability — receive your data in a portable format
• Object — object to processing based on legitimate interests

To exercise any of these rights, email [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

7. Data Security

We take reasonable technical and organisational measures to protect your personal data, including HTTPS encryption, secure server infrastructure, and access controls. No method of transmission over the internet is 100% secure — if you have concerns, contact us.

8. Cookies

We use only essential cookies necessary for the website to function. See our Cookie Policy for details.

9. Changes to This Policy

We may update this policy from time to time. The current version will always be available at doxly.co.uk/privacy. We will notify subscribers of material changes by email.

10. Contact

Data controller: Doxly, Stockport, SK2 5QB
Email: [email protected]