Privacy Policy

The controller is Kateryna Pochynok, an individual trading as Templary. There is no company and therefore no company number to quote. Post reaches the controller at Kateryna Pochynok, trading as Templary, 9 Garrick Rd. Lichfield WS13 7DR, England, United Kingdom; email reaches the same person at support@templary.cloud.

A data protection officer is not required for a business of this size and none has been appointed. Questions about this page go to the address above.

What exists today:

• Anything in a message you send us. Your email address and whatever you choose to write. It comes from you, and only because you wrote first.
• Server logs kept by the company hosting this site. An address of the device that asked for a page, the page asked for, the time, and the browser's own description of itself. These are created automatically by the hosting service; they are what any web server records.
• What your own browser stores for the basket. Item codes only. It never leaves your browser, so it never reaches us at all.
• Whatever you type into the enquiry form on the Contact page. Your name, your email address, the subject you chose and what you wrote, plus the reference the form gives it. The form itself transmits none of it: it writes the enquiry in your own browser and hands it to your own email application, so what reaches us is the email you choose to send, and it reaches us the way any other email does.

What an order adds to that:

• Order details. The email address you give, what you bought, what you paid, the date, and your answers to the two confirmations at the checkout.
• Confirmation from a payment provider that a payment succeeded. Card numbers are not part of that. They are handled by the provider on its own page and never reach this shop.

Nothing is collected from anywhere else. No data is bought, no lists are rented, and there is no profile of you assembled from other sources.

• Answering you. Basis: taking steps at your request before entering into a contract, or our legitimate interest in replying to somebody who wrote to us. UK GDPR Article 6(1)(b) and 6(1)(f).
• Carrying out an order. Sending the item, the guide, the licence and the confirmation. Basis: performance of a contract with you. Article 6(1)(b).
• Keeping the record of your consent to immediate delivery. The law requires the seller to keep that acknowledgement, so this one is a legal obligation. Article 6(1)(c), with regulations 16 and 37 of the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013.
• Keeping accounting records. Basis: a legal obligation to keep records of sales. Article 6(1)(c).
• Keeping the site working and secure. Server logs, and nothing more is done with them. Basis: legitimate interest in a site that stays up and is not abused. Article 6(1)(f).

There is no marketing use of any kind. No newsletter exists, nothing is sent to you that you did not ask for, and your address is never passed to anybody for their own marketing.

Four things are stored by your own browser, and none of them is sent anywhere by this site:

• templary.basket.v1, which holds the codes of the items you have set aside and stays until you take them out or clear your browser's data. Codes only, and nothing that identifies you;
• templary.enquiry.seq and templary.order.seq, two-digit counters so that two enquiries, or two orders, written from this browser do not carry the same reference. They are numbers, and nothing else;
• templary.order.v1, the order you have just placed, so that the confirmation page can show it. This one does hold your name and email address, it is kept in session storage rather than local storage, and the browser discards it when you close the tab.

There are no analytics cookies, no advertising cookies, no social media buttons, no embedded videos and no fonts loaded from another company's servers: the typefaces are served from this site itself.

That is why there is no consent banner. Storage that is strictly necessary for a service you asked for needs no consent under regulation 6 of the Privacy and Electronic Communications Regulations, and a shopping basket is the standard example given for it. If anything else is ever stored, a banner will appear and this section will change first.

Nobody is sent your data to use for their own purposes. It is never sold, and never passed to a broker or an advertiser. It reaches these categories of company only because they run part of the operation:

• The hosting company that serves these pages and keeps the server logs.
• The email provider that carries messages to and from the shop.
• The payment provider that handles the payment itself and tells this shop whether it succeeded.
• An accountant, if one is engaged, seeing sales records rather than correspondence.

Those are the categories. Each company is named here individually as it is engaged, and this page is republished with a new date when that happens; naming one before the arrangement is in place would be describing something that is not true. We would also disclose data if the law required it.

No transfer of your data outside the United Kingdom is relied on today, and none is needed for what this shop does: answering a message and sending an order.

Some providers of hosting, email and payment keep data outside the United Kingdom. If one that does is engaged, this section will name the provider, the country, and the basis for the transfer, which will be either adequacy regulations made by the Secretary of State or the International Data Transfer Agreement or Addendum. That will be written here before the provider is used, rather than afterwards.

• A message that never becomes an order: 12 months from the last reply, then deleted. That is a decision rather than a legal requirement, and it can be shortened on request.
• Order and payment records: 6 years from the end of the tax year they fall in, because tax records have to be kept.
• Your consent to immediate delivery: kept with the order record, for the same period, because the law requires the seller to be able to produce it.
• Server logs: 30 days, after which the hosting company overwrites them. Nothing is copied out of them and nothing is built from them.

You have the right to:

• be told what is held about you and to have a copy of it;
• have anything incorrect corrected;
• have data deleted, where we do not have to keep it for tax or for the record the law requires;
• ask us to stop using it while a dispute about it is sorted out;
• object to use that rests on legitimate interest;
• have data you gave us provided in a portable form;
• withdraw consent at any time, where consent was the basis. That does not undo anything done before.

Ask at support@templary.cloud, or by post at Kateryna Pochynok, trading as Templary, 9 Garrick Rd. Lichfield WS13 7DR, England, United Kingdom. There is no charge, and an answer is due within one month. Proof of identity may be needed first, so that a copy of somebody's data is not handed to a stranger who asked for it.

Is providing data compulsory? No, and nothing here is asked for by law except what an order needs. Without an email address an order cannot be delivered, because the delivery is an email. Nothing else is required to read this site.

Automated decisions. There are none, and there is no profiling. Nothing about you is decided by a system without a person, because there is no system that decides anything.

Please raise it with us first, at support@templary.cloud or at Kateryna Pochynok, trading as Templary, 9 Garrick Rd. Lichfield WS13 7DR, England, United Kingdom. A complaint is acknowledged within 2 working days and answered in full within 10 working days.

You can also complain to the Information Commissioner's Office at any time, whether or not you have written to us: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or through ico.org.uk.

On registration with the Information Commissioner's Office: the processing this business carries out is limited to its own accounts and records and to answering the people who write to it, which is within the exemption in the Data Protection (Charges and Information) Regulations 2018, so no annual data protection fee is payable and no registration is held. Nothing on this site claims one. If analytics, a mailing list or a customer database is ever added, the exemption ends, and the fee will be paid and this paragraph rewritten before that happens.

This page was last revised on 16 September 2026. It will change when a hosting provider, an email provider or a payment provider is chosen, because each of those has to be named above.

A changed version is published here with a new date. Where a change matters to somebody who has already ordered, they will be told by email rather than left to notice a date.