privacy.
last updated 28 September 2026
the short version
- I collect only what I need to deliver your books, send the free sample, and keep the site running.
- No cookies by default. Google Ads cookies only if you say yes to the banner.
- Your card details never reach this site. Stripe and Link handle the payment.
- I don't sell your data or share it for anyone else's marketing.
- Ask me for a copy, a correction or a deletion any time: ahmed@nexarlabs.co.uk.
who is responsible
The controller of your personal data is NEXARLABS LTD, trading as Nexar Labs. I'm Ahmed Mansy, and I run it. For anything about your data, email me.
NEXARLABS LTD (trading as Nexar Labs)company no. 16703034 · registered in England and Wales
registered office: 71–75 Shelton Street, London WC2H 9JQ
email: ahmed@nexarlabs.co.uk
what I collect, and why
| what | details | why, and the legal basis |
|---|---|---|
| your order | email, name, country, what you bought, the amount and currency, the payment reference and the time. It comes from Stripe when you pay. | to deliver the files, email your links, handle refunds and support (contract), and keep tax and accounting records (legal obligation). |
| downloads | which order and file, the time, and the country the request came from | to apply the download limit on each order and spot shared links (legitimate interests). |
| free sample sign-ups | your email, where on the site you signed up, your country (from Cloudflare) and the time | to send the 12 pages you asked for and, now and then, news of a new edition (consent; unsubscribe from any email). |
| emails you send me | whatever you write, and your address | to answer you (legitimate interests, or contract if it's about an order). |
| server and security logs | your IP address, browser and the pages requested, handled by Cloudflare as the site's host | to deliver the site and protect it from abuse (legitimate interests). |
| visit counts | Cloudflare Web Analytics: page views and rough location, with no cookies and no profile of you | to see which pages people read (legitimate interests). |
| ad measurement | Google Ads cookies, only if you say yes (see cookies) | to see which ads bring readers here (consent). |
card details
You pay on Stripe's checkout page. Payments run through Stripe Managed Payments, where Stripe's reseller partner (named on the checkout page) is the merchant of record, so for the payment itself Stripe and the reseller decide how your payment details are used: stripe.com/privacy and the reseller's terms linked at checkout. This site never sees your card number.
who else handles it
These companies process data for me, under contract, only to provide their service:
- Cloudflare: hosting, the database (D1) that holds orders and sign-ups, file storage (R2) for the books, cookieless Web Analytics, and sending email where that's used.
- Stripe and Link: checkout, payment, tax, receipts and refunds.
- Resend: sending the emails with your links or the sample, if it's the email service in use.
- Google: ad measurement, only after you say yes to cookies. How Google uses data from sites that use its services: business.safety.google/privacy.
I don't sell your data, and I don't share it with anyone for their own marketing.
outside the UK
Some of these providers process data outside the UK, for example in the United States. When they do, the transfer is covered by the safeguards UK data protection law requires, such as the UK–US data bridge or the UK's international data transfer agreement and addendum.
how long I keep it
- Orders: 6 years after the end of the financial year, for tax and accounting.
- Sample sign-ups: until you unsubscribe. After that I keep only your address and the date you left, so you're never emailed again.
- Download logs: 12 months.
- Emails you send me: as long as needed to help you, and with the order if it's about one.
- Server logs: for as long as Cloudflare keeps them for security and operations.
your rights
Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you can ask me to:
- give you a copy of the data I hold about you;
- correct it, or delete it where I don't have to keep it;
- restrict how I use it, or object to uses based on legitimate interests;
- give you your data in a format you can take elsewhere;
- stop using it where you gave consent (for emails, the unsubscribe link does this).
Email ahmed@nexarlabs.co.uk. I'll answer within one month. If you're not happy with how I handle your data, you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.
changes
If I change what I collect or who processes it, I'll update this page and the date at the top. Questions: ahmed@nexarlabs.co.uk. More: terms of sale and refunds.