Linkedin Facebook X-twitter Instagram Youtube Tiktok

Privacy Policy

How we collect, use and protect your personal data — in compliance with UK GDPR.

Effective: 28 January 2026  |  Data Controller: Wataalam Ltd, Manchester, UK  |  Email: habari@wataalam.com

Wataalam Ltd operates www.wataalam.com. This Privacy Policy explains what personal data we collect, how we use it and what rights you have. We comply with the UK General Data Protection Regulation (UK GDPR).

1. Information We Collect

  • Purchases: Name, email address, billing address and IP address (collected via Stripe).
  • Contact forms: Name, email address and the message you send us.
  • Analytics: Cookies and page-view data (collected via Google Analytics).

2. How We Use Your Data

  • Process payments and deliver digital downloads.
  • Send order confirmation and receipt emails.
  • Marketing communications (you can unsubscribe at any time).
  • Comply with tax and legal obligations.

3. Data Sharing

We only share your data with:

  • Stripe — to process payments securely.
  • Hostinger — our web hosting provider.
  • Google Analytics — anonymised usage data only.

We do not sell your data.

4. Digital Downloads

Once payment is complete via Stripe, you receive a unique download link by email. That link expires after 30 days or 5 download attempts, whichever comes first.

5. Your Rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you.
  • Correct any inaccurate data.
  • Delete your data (where legally possible).
  • Object to how we use your data.
  • Withdraw consent at any time.

To exercise any of these rights, email habari@wataalam.com with the subject line “Data Request”.

6. Cookies

  • Essential cookies — needed for the shopping cart to work. Cannot be turned off.
  • Analytics cookies — help us understand how visitors use the site. You can opt out via your browser settings.

7. Retention Periods

  • Order records: 7 years (legal requirement).
  • Contact enquiries: 3 years.

8. Security

All pages are served over SSL (HTTPS). Payments are handled entirely by Stripe, which is PCI DSS compliant. Download links are unique and time-limited for added security.

9. International Transfers

Stripe processes payments from servers in the USA. This transfer is covered by appropriate contractual safeguards (Standard Contractual Clauses).

10. Changes to This Policy

If we update this policy, the new version will be posted here. We recommend checking this page periodically. Last reviewed: January 2026.