Privacy Policy
Effective date: 1 September 2026 · Last updated: 1 September 2026
1. Who We Are
Prompt Packs sells downloadable AI prompt packs. Registered address: Prompt Packs, 1 Example Street, London, United Kingdom, EC1A 1AA. We are the data controller for the personal data described below. For any data protection enquiry, contact us here or email hello@promptpacks.co.uk.
2. What Data We Collect
- Identity data: your name, and company name if you give one
- Contact data: email address, and telephone number if you give one
- Order data: what you bought, when, the amount paid and your order reference
- Technical data: IP address, browser type, device and operating system
- Usage data: pages visited and time on site, if you accept analytics cookies
We never see your card details. Payments are processed by our payment provider; card numbers do not reach our servers. We never see what you type into your AI assistant. The packs are files you download, and nothing you prompt passes through us.
3. How We Collect It
- When you buy a pack (through our payment provider's checkout)
- When you fill in the contact form or email us
- When you browse the site, via cookies and analytics (only after you accept)
4. Why We Use It, and Our Lawful Basis
| Purpose | Lawful basis |
|---|---|
| Delivering your download and receipt | Performance of a contract |
| Answering support enquiries | Performance of a contract / legitimate interests |
| Emailing you free updates to a pack you own | Legitimate interests (you can opt out in any email) |
| Marketing emails about new packs | Consent, only if you opted in |
| Keeping tax and accounting records | Legal obligation |
| Website analytics | Consent (cookie banner) |
5. Cookies & Analytics
The site sets no analytics cookies until you accept them. If you accept, Google Analytics records anonymised usage data. You can decline and use the site normally, or change your mind by clearing site data in your browser. See Google's Privacy Policy. The contact form also uses Cloudflare Turnstile to block spam, which sets no tracking cookies.
6. Who We Share Data With
We do not sell personal data. We share only what is needed with:
- Our payment provider, to take payment and issue refunds
- Our email provider, to send receipts, downloads and support replies
- Our hosting and delivery provider, to serve the site and your files
- Our analytics provider, if you accepted analytics cookies
- Our accountants, and HMRC or other authorities where the law requires
7. How Long We Keep It
- Order and payment records: 7 years, as tax law requires
- Support correspondence: 2 years from the last message
- Marketing contacts: until you unsubscribe
- Analytics: per our analytics provider's default retention
8. How We Protect It
The site is served over HTTPS, access to order data is limited to those who need it, and secrets and API keys are held in the hosting provider's encrypted environment rather than in code.
9. Your Rights (UK GDPR)
You have the right to:
- Request a copy of the personal data we hold about you
- Have inaccurate data corrected
- Request erasure, where we are not legally required to keep it
- Object to or restrict processing, including direct marketing
- Ask for your data in a portable format
- Complain to the UK Information Commissioner's Office
To exercise any of these, contact us. We respond within one month.
10. International Transfers
Some of our providers process data outside the UK. Where they do, transfers are covered by UK adequacy regulations or standard contractual clauses.
11. Changes to This Policy
We update this policy when our services or the law change. The current version is always on this page with its update date at the top.
Questions about this policy? Contact us here.