Version 1.0. Last updated 17 October 2026.

This notice explains what personal data we collect when you buy or download from our store, why we use it, who else is involved, how long we keep it and what your rights are. It covers the store at https://payhip.com/CognitoConsultants and the emails we send about it.

1. Who we are

Cognito Consultants Ltd is a private limited company registered in England and Wales, company number 12928272. Our registered office is Office LG06, 1 Quality Court, Chancery Lane, London WC2A 1HR.

We are registered with the Information Commission (known as the ICO) as a data controller, registration number ZB657495.

For anything about your personal data, email info@cognitoconsultants.com. For complaints, see section 13.

2. Who else is involved

Our store runs on a platform provided by other companies. They handle some of your data under their own privacy policies, not ours.

Payhip. The store, the checkout and the file downloads are provided by Payhip Ltd (company number 08386910). Payhip's privacy policy says that Payhip Limited is the data controller for the personal data it handles on its platform. Payhip says it uses buyers' data to perform its obligations under its contract with the seller. It passes your name, email address and purchase details to us. Payhip says it stores data on secure servers in the EU and keeps transaction details for 10 years for VAT purposes. Payhip says it handles EU VAT on sales to buyers in the EU. Please read Payhip's own privacy and cookies policy at https://payhip.com/privacy

Stripe. If you pay by card, your payment is handled by Stripe. Stripe's privacy policy says that, depending on the activity, it acts as a data controller or a data processor. For a business's customers it acts mainly for that business, and, where allowed, it also uses that data for its own purposes, such as security and preventing fraud. See https://stripe.com/gb/privacy

You enter your card or PayPal details with the payment provider, not with us. Payhip says it never collects card details. We do not store your card details.

3. What personal data we receive

When you buy the PSIRF Starter Kit or download the free sample, we receive:

• your name (for the free sample, only if you give it)
• your email address
• your billing country, and your billing address if you give it
• your IP address
• what you bought or downloaded, when, and how many times you have downloaded it
• your answers to our checkout questions (for the kit, that you agreed your download could start straight away and that you lose your 14-day right to cancel, and for the free sample, whether you want emails from us)
• the payment status and order reference

If you email us, we also hold your message, your contact details and our reply.

4. Where it comes from

Most of this data comes from you, through Payhip's checkout. Payhip passes it to us. The payment status comes from Payhip and from Stripe. If you email us, it comes from you directly.

5. What we use it for, and our lawful basis

To provide what you bought or asked for. This means delivering your download, sending your receipt, helping you with the files, and sending you updated files during the 12 months after your purchase. Our lawful basis is contract.

To protect our templates from unauthorised copying. Payhip stamps the buyer's email address on the pages of the PDF guide, and limits each download link to 10 downloads. Our lawful basis is legitimate interests. Our interest is protecting our work.

To keep a record of your checkout answers. For the kit, this shows that you agreed your download could start straight away and that you lose your 14-day right to cancel. For the free sample, it shows whether you said yes to emails. Our lawful basis is legitimate interests. Our interest is being able to show that we met consumer law and marketing law.

To keep tax and accounting records. Our lawful basis is legal obligation.

To deal with refunds, faulty files, questions and complaints. Our lawful basis is contract, and legal obligation where consumer law or data protection law requires us to act.

To send you occasional emails about PSIRF updates and new templates. We only do this if you answered Yes when you downloaded the free sample. Our lawful basis is consent. You can withdraw your consent at any time by using the unsubscribe link in any email or by emailing us.

We do not add buyers of the kit to a marketing list. Update emails about a kit you bought only tell you about the update. They do not contain marketing.

To protect our business and deal with legal claims. This includes preventing fraud and keeping our store secure. Our lawful basis is legitimate interests. Our interest is protecting our business and being able to defend ourselves.

6. Do you have to give us your data?

You must give your email address, because that is how we deliver your download. To buy the kit, you must also answer the right to cancel question, because we cannot start your download straight away without it. If you do not give this information, we cannot supply the kit or the sample.

Saying No to emails does not affect your download in any way.

7. Who we share it with

We share your data only where we need to:

• Payhip, which runs the store (see section 2)
• Stripe, which handles your payment (see section 2)
• Microsoft, which provides our email and file storage (Microsoft 365)
• our accountant, and HMRC where the law requires it
• our professional advisers and insurers, if we need their help with a claim or complaint
• the police, a court or a regulator, where the law requires it

We do not sell your personal data.

8. Transfers outside the UK

Payhip says it stores data on servers in the EU. Payhip says data may sometimes be transferred outside the EEA, and its policy describes the safeguards it uses. Stripe may transfer data to other countries. Their privacy policies explain how they protect it.

9. How long we keep it

• Order and payment records, including your checkout answers: 6 years from the end of the financial year the order relates to, which is the period HMRC requires for tax records.
• Your download access and update emails: for as long as Payhip keeps your download link working, and at least the 12 months of updates.
• Marketing emails: until you unsubscribe or ask us to stop. After that we keep a note of your email address and that you unsubscribed, so we do not email you again.
• Emails with us about a question or refund: 2 years after our last contact.
• Complaints: 3 years after the complaint is closed.

Payhip keeps its own records under its own policy. It says it keeps transaction details for 10 years for VAT purposes.

10. Your rights

You have the right to:

• ask for a copy of your personal data
• ask us to correct data that is wrong or incomplete
• ask us to delete your data
• ask us to restrict how we use your data
• object to how we use your data where we rely on legitimate interests, and object at any time to marketing emails
• ask for your data in a format you can move to another organisation
• withdraw your consent to marketing emails at any time

Some of these rights only apply in certain situations. For example, we cannot delete order records that the law says we must keep. To use any of these rights, email info@cognitoconsultants.com. We will reply within one month, or up to two further months for complex requests, and we will tell you why.

Payhip holds its own copy of your data as a controller. To use your rights over that copy, contact Payhip using the details in its privacy policy.

11. Automated decisions

We do not make decisions about you by automated means alone.

Payhip's privacy policy says it uses a service called FullContact to link user data to public online profiles. That is Payhip's own processing. See Payhip's privacy policy for details.

12. Cookies

The store runs on Payhip. Payhip's policy says it uses strictly necessary cookies and analytical cookies, and that third parties may set other cookies. See Payhip's privacy and cookies policy at https://payhip.com/privacy

We have not added our own tracking or advertising tools to the store.

13. How to complain

You can complain to us. If you think we have not handled your personal data properly, please tell us. Please send all complaints by email to complaints@cognitoconsultants.com. Email is the quickest way for us to look into your complaint and reply. Our data protection complaints procedure is at https://payhip.com/CognitoConsultants/complaints. We will acknowledge your complaint within 30 days, look into it, keep you informed, and tell you the outcome.

You can also complain to the Information Commission (known as the ICO), the UK regulator for data protection. See https://ico.org.uk/make-a-complaint/ The Information Commission usually asks people to raise their complaint with the organisation first.

14. Changes to this notice

We will update this notice when how we use your data changes. The version number and date at the top show when it last changed.