Last updated: 6 August 2026
This policy explains what personal information Explore Sofar (“we”, “us”) collects when you visit exploresofar.com or buy a guide, why we collect it, and what rights you have over it. Explore Sofar is operated by [LEGAL ENTITY NAME], [ENTITY ADDRESS].
What we collect
When you buy a guide. Your email address, and the billing details required to complete the transaction and issue a valid receipt. Because our products are digital downloads, we do not collect or store a shipping address.
Payment information. Card and payment details are entered directly into [PAYMENT PROCESSOR] and are never received, processed, or stored on our servers. We receive only a confirmation that payment succeeded, along with the last four digits and card type where the processor supplies them.
Your account. An account is created at checkout so your purchase stays available to download. It stores your email address, order history, and download links.
Automatically. Your IP address, browser type, device type, referring page, and pages viewed. This is standard server and analytics data used to keep the site secure and understand how it is used.
If you email us. Your email address and whatever you choose to put in the message.
Why we use it
- To deliver the guide you bought and keep it downloadable from your account
- To send transactional email: order confirmation, download link, receipt
- To handle support requests, refunds, and disputes
- To meet tax, accounting, and record-keeping obligations
- To detect and prevent fraudulent orders
- To understand which pages and guides people find useful
We do not sell your personal information. We do not share it with advertisers. We will only send you marketing email if you have separately asked us to, and every such email carries an unsubscribe link.
Legal basis
Where the UK or EU General Data Protection Regulation applies, we rely on: contract (delivering the guide you bought), legal obligation (tax and accounting records), legitimate interests (site security, fraud prevention, understanding site usage), and consent (marketing email and non-essential cookies, which you may withdraw at any time).
Who we share it with
We share personal information only with service providers who need it to run the shop, and only for that purpose:
- [PAYMENT PROCESSOR] – processes payments and holds your card data under its own privacy policy
- Our web host – stores the site, its database, and server logs
- Our email provider – delivers order confirmations and download links
- [ANALYTICS PROVIDER] – reports aggregate site usage
We may also disclose information where we are legally required to, or to establish or defend a legal claim.
International transfers
Some of the providers above operate outside your country. Where personal information is transferred internationally, it is protected by an appropriate safeguard such as Standard Contractual Clauses or an adequacy decision.
How long we keep it
Order and transaction records are kept for as long as tax and accounting law requires, typically six to seven years. Your account and its download links are kept until you ask us to delete them. Server logs are kept for a short period for security purposes. Marketing consent records are kept until you unsubscribe, plus a short period afterwards to prove the unsubscribe was honoured.
Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, restrict or object to how we use it, receive a portable copy, and withdraw consent. If you are in California, you also have the right not to be discriminated against for exercising these rights.
To exercise any of these, email [CONTACT EMAIL]. We will respond within one month. Note that we cannot delete records we are legally required to retain, such as completed transaction records.
If you are unhappy with how we have handled your information, you may complain to your local data protection authority.
Children
This site is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, email [CONTACT EMAIL] and we will delete it.
Security
The site runs over HTTPS, and access to the store admin is restricted. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we take reasonable measures to protect your information.
Changes
If we change this policy we will update the date at the top of this page. Material changes will be flagged on the site.
Contact
Questions about this policy or your information: [CONTACT EMAIL].
