Last updated: 2 October 2026
This policy explains what personal data is collected when you buy or read The Art of Solo Guitar Composition – Interactive Ebook, and what happens to it. The data controller is Udi Glaser, trading as UdiGuitar and The Art of Solo Guitar Composition, Unit 132120, PO Box 7169, Poole BH15 9EL, United Kingdom (email: udi@udiguitar.com, phone: +44 20 8347 5754).
What I collect, and why
| Data | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Your name, email and order details (from Stripe or Payhip, or given to me directly) | To create your access code, email it to you and help you if something goes wrong | Contract |
| Your access code, a random ID for each device you use (up to 5), how many times you've opened the book and when you last did | To keep the book working for you and stop codes being shared widely | Contract and legitimate interests |
| Whether my emails to you were delivered | To make sure you actually received your code | Legitimate interests |
| Reviews you write (name, stars, text) and whether you allowed me to show them | To learn what helps readers and, if you allowed it, to use your review and first name to promote the book | Consent (you can withdraw it any time) |
| Messages you send me | To reply and support you | Legitimate interests |
| Basic technical data (IP address, browser) handled by the hosting provider | To deliver the website securely and prevent abuse | Legitimate interests |
Your reading data stays on your own device: your last page, bookmarks, notes and settings are saved in your browser and are never sent to me.
I don't sell your data, and I don't use it for advertising. I'll only email you about your purchase and the book, unless you separately agree to hear about other things.
Who helps me run this
These service providers process data for me, under contracts that require them to protect it:
- Cloudflare – hosting, storage of access codes and reviews, and privacy-friendly visit statistics (no cookies, no individual tracking).
- Stripe and Payhip – payments. They act under their own privacy policies for payment data.
- Resend – sending your access-code email.
- YouTube (Google) and Vimeo – only if you press play on a video on the sales page.
Some of these providers are based in or use servers in the United States. Transfers are protected by the UK's adequacy regulations (including the UK–US data bridge) or the UK International Data Transfer Addendum.
How long I keep it
Account and access data: for as long as you have access to the book. Order records: 6 years, as UK tax law requires. Reviews: until you ask me to delete them. Email delivery logs: kept by the email provider for a limited time (usually 30 days).
Your rights
You can ask me for a copy of your data, to correct it, to delete it, to restrict or object to how I use it, or to move it to another service. You can withdraw consent (for example, to stop using your review) at any time. Just email udi@udiguitar.com; I'll respond within one month. If you're not happy with how I handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
See the cookie policy.