Privacy Policy
Last updated: 7 August 2026
Who we are
This shop is operated by Care to Heal Ltd, a company registered in England and Wales.
- Company number: 15498854
- Registered office: 128 City Road, London, England, EC1V 2NX
- Contact: contact@drsundas.com
Care to Heal Ltd is the data controller for the personal information described in this policy. This means we decide how and why your information is used, and we are responsible for looking after it.
This Privacy Policy applies to Care to Heal Ltd's online shop, mailing list and other online services where this policy is linked.
It explains what we do with your personal information when you visit our shop, buy a guide, join our mailing list, or contact us.
Our shop runs on the Payhip platform. Payhip operates the platform and processes personal information in accordance with its own privacy policy.
What we collect, and why
When you buy a guide
We receive your name, email address, country, and details of what you bought. We use this to process your order, deliver your purchase, provide access to your files, and handle any questions or problems afterwards.
Our lawful basis is performance of a contract — we need this information to sell you the guide and deliver it.
To discourage unauthorised sharing, Payhip may stamp the email address used for the purchase and the purchase date on each page of the PDF. Our lawful basis is legitimate interests — specifically, our interest in protecting our digital products from unauthorised sharing.
Payment information
Payments are processed by Stripe and PayPal. We do not receive or store your full card details. We receive limited transaction information, such as the payment status, the amount, a transaction reference, and — depending on the payment method used — the name and email address associated with your payment.
Records we have to keep
We keep records of sales and payments for accounting and tax purposes. Our lawful basis is legal obligation.
If you ask to receive emails from us
If you tick the marketing box at checkout, or sign up to our mailing list, we use your email address to send you updates about our guides and services. Our lawful basis is consent.
If you sign up to our mailing list, we collect the name and email address you provide in order to send you the emails described at the point of signup. We use MailerLite to host our signup forms, manage our mailing list and send these communications.
You can withdraw consent at any time using the unsubscribe link in any email, or by emailing us. Withdrawing consent does not affect anything we sent before you withdrew it. After you unsubscribe, we may retain a minimal suppression record so that we can ensure you are not added to the mailing list again.
If you do not opt in, we will not add you to our mailing list.
If you contact us
If you email us with a question, a problem, or a request, we use your message and contact details to reply and to keep a record of the issue. Our lawful basis is legitimate interests — specifically, our interest in providing support to customers and keeping a record of what was asked and answered.
Analytics
If you accept analytics cookies, we collect information about how the shop is used — such as pages visited and how visitors arrive — so we can improve it. Our lawful basis is consent, and you can accept or reject analytics cookies using the banner shown when you first visit.
If you reject analytics cookies, we do not use analytics cookies to collect information about your visit.
Who else receives your information
We use the following services to run the shop. Each receives only what it needs.
- Payhip — hosts the shop, processes orders and delivers files.
- Stripe and PayPal — process payments.
- MailerLite — hosts our signup forms, holds our mailing list and sends our marketing emails. Only people who have given consent are added.
- Google Analytics — provides website analytics, where you have accepted analytics cookies.
- Zoho — provides our email service, so customer correspondence is held in our mailbox.
We do not sell your personal information, and we do not share it with anyone for their own marketing.
We may also share information where we are required to by law, or where it is necessary to establish, exercise or defend a legal claim.
Information sent outside the UK
Some of the services above process information outside the UK.
Where that happens, the transfer is protected by one of the safeguards recognised under UK data protection law — either the country has been assessed by the UK government as providing adequate protection, or the provider uses approved contractual safeguards such as the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses. Details are set out in each provider's own privacy terms.
You can ask us for more information about the safeguards that apply.
How long we keep it
- Sales and accounting records — six years from the end of the accounting period they relate to, to meet our tax and accounting obligations.
- Mailing list — until you unsubscribe or ask us to remove you, other than the minimal suppression record described above.
- Support correspondence — two years after the matter is resolved, unless we need to keep it longer for a legal reason.
- Google Analytics data — event data is retained for 2 months, and user data for 14 months. The user-data retention period resets when new user activity occurs. Aggregated reporting data may be retained for longer, in accordance with Google's policies.
Your rights
Depending on the circumstances, UK data protection law may give you the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct information that is wrong or incomplete
- ask us to delete your information
- ask us to restrict how we use it
- object to our use of it where we rely on legitimate interests
- object at any time to the use of your personal information for direct marketing
- ask us to transfer it to you or another provider, in a machine-readable format
- withdraw your consent at any time, where we rely on consent
To exercise any of these, email us at contact@drsundas.com. We will respond within one month.
Cookies
We use cookies to operate the shop and process orders. With your permission we also use analytics cookies to understand how the shop is used, so we can improve it. You can accept or reject analytics cookies using the banner shown when you first visit.
Complaints
If you have concerns about how we use your personal information, please contact us at contact@drsundas.com. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.