Privacy for Resources
Last updated: 30 October 2026
The short version
This page is about buying Resources (printable PDFs) on upthrust.app. The Upthrust app, your Upthrust account and the Exam Pass are covered on our main Privacy page. Nothing on this page changes that.
When you buy, we keep only what we need to sell you the PDFs: your email, what you bought and the order number. Stripe handles your card; we never see it. We keep payment records for tax, as the law requires. You can ask to see or delete your information at any time.
1. Who we are
Upthrust is run by Shimellis Mamo, a sole trader trading as Upthrust (“we”), who decides how your information is used (the “controller” under UK data protection law). Our postal address is Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA, and you can also reach us at support@upthrust.app. We are registered with the Information Commissioner’s Office (ICO), registration number ZC288882.
Email: support@upthrust.app.
2. What we collect, why, and the legal reason
| You buy Resources | What: your email address; your name and card country or postcode if Stripe asks for them; what you bought; the order number; that you ticked the box to have your downloads straight away; how many times each file was downloaded; a note if you swapped a workbook. Why: to take payment, give you the download, email your confirmation, and handle refunds or faults. Legal reason: contract (UK GDPR Article 6(1)(b)). |
|---|---|
| You email us | What: your message and email address. Why: to reply and help. Legal reason: legitimate interests (Article 6(1)(f)), or contract if it is about an order. |
| Tax and accounts | What: payment records: amount, date, what was bought, order number, refunds. Why: the law requires business records. Legal reason: legal obligation (Article 6(1)(c)). |
You need to give us your email address to buy; without it we cannot send your order. Nothing else is required.
We never see your card details. We do not use your information for adverts, and we do not sell it. We make no automated decisions about you.
3. Who else handles your information
We use a few companies to run Resources. They act on our instructions and may not use your information for their own purposes, except where stated.
- Stripe (UK, EU and US) takes card payments, sends receipts and handles refunds. Stripe also uses payment data for its own fraud checks, under its own privacy policy.
- Cloudflare (US and worldwide) runs this website, forwards email sent to support@upthrust.app to our inbox, and runs the small service that checks payments and stores the PDFs.
- Resend (a US company) sends order emails from bookings@upthrust.app. It keeps a record of each email for 30 days.
- Google (US and worldwide) holds our email inbox (messages to support@upthrust.app arrive there).
We may also share information when the law requires it, for example with HMRC or our accountant for tax.
4. Information sent outside the UK
Some of these companies are based in, or use services in, the United States. Where information leaves the UK, it is protected by the UK-US data bridge (for companies certified to it) or by the contract terms for international transfers approved by the Information Commissioner’s Office (ICO), the UK’s data protection regulator.
5. How long we keep it
| Your Resources thank-you page and download counts | The page works for 7 days after you buy, or after we send you a new link. The download counts are deleted 8 days after they were last used |
|---|---|
| A note that we swapped a workbook for another version | 400 days, so the swap still works if you come back to us |
| Payment and refund records (in Stripe and our accounts) | At least 5 years after the 31 January tax return deadline for that tax year, as the law requires. That is about 6 to 7 years |
| Emails with us | 12 months after we last wrote to each other, unless we need them for a complaint |
| Copies of emails held by Resend | 30 days |
6. Children
- If you are under 18, please read this page with a parent or carer.
- Young people have the same rights over their information as adults. A young person who understands what they are asking can make a request themselves. A parent can act for their child when the child agrees, when the child is too young to understand, or when it is clearly in the child’s best interests.
7. Your rights
You can ask us to:
- see the information we hold about you (and get a copy)
- correct anything that is wrong
- delete your information (we may need to keep payment records for tax)
- limit how we use it, or object to us using it
- send it to you, or to someone else, in a common format
Email support@upthrust.app. It is free. We reply within one month, and tell you if we need longer. We may ask you to confirm who you are.
8. Complaints
Please tell us first at support@upthrust.app. We reply within 2 working days and deal with it without undue delay.
If you are not happy with our answer, you can complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, or call 0303 123 1113.
9. Cookies and storage
Buying Resources sets no cookies and uses no analytics. Your basket is kept in your own browser’s storage on your device, so it is still there if you close the page; it holds only the items you chose. Removing items, paying, or clearing this site’s data in your browser empties it. The cookies used to sign in to your Upthrust account are explained on our main Privacy page.
10. Changes
If anything here changes, this page changes first, with a new date.