WHAT HAPPENS TO YOUR EMAIL ADDRESS.

WHAT IS COLLECTED

Your email address. That is the whole list.

Nothing else is asked for and nothing else is stored: no date of birth, no school, no phone number, no postal address, and no question about which university you are applying to. None of it is needed to send you a PDF, and collecting information you do not need from an audience that is mostly under eighteen is not a neutral act.

If you tick the optional box, the fact that you ticked it is recorded too, so there is a record of you having agreed.

WHAT IT IS USED FOR

There are exactly two uses, and they are kept separate on purpose.

1. Sending you the paper. You give an address, you get a confirmation email, you click the link in it, and the paper arrives. Confirming is a deliberate extra step: it means nobody can sign up an address that is not theirs.
2. Sending you new worked examples and papers — but only if you ticked the separate, unticked box. Leaving it unticked still gets you the paper. It is not a condition, it is not bundled, and it is not pre-ticked.

Your address is never used to advertise anything other than these books, never sold, and never passed to anyone else for their own marketing.

HOW LONG IT IS KEPT

If you only wanted the paper, your address is deleted twelve months after you asked for it.

If you ticked the box for new worked examples, your address is kept until you unsubscribe. If you have not opened anything for twenty-four months it is deleted anyway, because an address nobody reads is a risk with no benefit.

Unsubscribing removes you immediately. A record that the address unsubscribed is kept, and kept only so that you are not accidentally added again.

HOW TO UNSUBSCRIBE

Every email has an unsubscribe link at the bottom. One click, no login, no form, no "are you sure". You can also email hello@esatpapers.com and ask, and your address will be removed.

COOKIES AND TRACKING

This site sets no cookies at all, no advertising cookies and no behavioural tracking. There is no Facebook pixel, no Google Ads tag, and no retargeting of any kind, which is a deliberate choice rather than an oversight: retargeting an audience of sixteen to eighteen year olds is not something worth doing to sell a practice book.

There is one measurement tool, Vercel Web Analytics, and it is the cookieless kind. It counts page views so we can tell whether anyone is finding the site. It sets no cookies, it does not identify you, and it cannot follow you to any other website. Visitors are counted using a value worked out from the request itself, which is thrown away after twenty‑four hours, so there is nothing that persists from one day to the next and nothing that could be traced back to a person.

What it records for each page view is: the time, which page, which site you came from if any, the country and rough area you are in, and whether you are on a phone, tablet or computer along with the browser you used. It also records when somebody clicks through to Amazon, and which book. That is the complete list. No name, no email address, no IP address stored, and nothing that is joined up to the address you give if you ask for a paper.

The links to Amazon are ordinary links. There is no embedded Amazon widget or buy-button script anywhere on the site, because those set third-party cookies of their own. Once you follow a link to Amazon you are on Amazon, and their privacy policy applies there.

IF YOU BUY A DIGITAL EDITION

Payment is handled by Stripe. They take your card details and this site never sees them, so there is nothing here to lose. Stripe keeps a record of the purchase, as any shop has to.

Your email address is used for exactly two things: sending you the download link, and printing it into your copy of the book. Every page of your copy carries the address you bought it with, in the bottom margin, along with a reference code worked out from it. That is deliberate and it is explained in the terms, so that a copy passed around can be traced back to whoever bought it.

Buying does not put you on any mailing list. The receipt is sent through Resend, who handle that one email and nothing further. If you also want new worked examples you have to ask for them separately, in the same way as anyone else.

YOUR RIGHTS

You can ask what is held about you, ask for it to be corrected, or ask for it to be deleted, and any of those will be done. Since the only thing held is an email address, "delete everything" is usually the quickest answer, and you are welcome to ask for exactly that without giving a reason.

Email hello@esatpapers.com. If you are not happy with the response, you can complain to the Information Commissioner's Office at ico.org.uk.

There is no live chat and no message form on this site, and that is on purpose. An open contact channel aimed at students is a thing that needs moderating, and a general enquiries address does the job without one.

THE EMAIL PLATFORM

Addresses are stored and emails are sent by Kit, which used to be called ConvertKit. It acts on instruction and does nothing else with your address. Kit is a United States company and stores its data there, so giving us your address means it leaves the UK.

Signing up is double opt-in: nothing is sent until you click a confirmation link, so somebody typing your address into the form does not put you on a list. Kit records whether an email reached you, whether you opened it and whether you clicked a link in it. That is how every email platform works, and it is worth saying plainly rather than leaving you to assume otherwise. None of it is joined up with anything you do on this site, and none of it decides what you are sent.

WHO IS RESPONSIBLE

These books and this site are the work of Carl Morris, who is the data controller: the person who decides what happens to anything you hand over. There is no company or marketing department behind the site. It is one person who wrote the books.

To ask anything about your data, or to use any of the rights above, email hello@esatpapers.com. The reply will come from Carl Morris. If you are not satisfied with it you can complain to the Information Commissioner's Office at ico.org.uk, which is the UK regulator for this.