Who is responsible for your information

Steve Wyatt Growth is a trading name of Maximum Solutions Consulting Ltd, registered in England and Wales under company number 11158869.  The company is the data controller for personal information collected through this website, enquiries and book orders.

Information collected

If you contact me, I may receive your name, email address and anything you include in your message.  If you buy a signed book, the information needed to manage the order may include your name, email address, delivery address, order details, payment status and any dedication you request.  The website and its service providers may also process limited technical information, such as an IP address and security or server logs.

Payments through Stripe

Payments for signed books are handled through Stripe.  When you select the payment link, you are taken to Stripe's secure checkout service.  Stripe collects the payment and fraud-prevention information needed to process the transaction.  Steve Wyatt Growth does not receive or store your full card number.  Stripe may provide the contact, delivery and transaction details needed to confirm and fulfil your order.  Stripe handles information under its own privacy policy as well as its arrangements with Steve Wyatt Growth.

How information is used

Information is used only where reasonably necessary to respond to enquiries, discuss or provide services, process and deliver book orders, provide customer support, maintain financial and business records, prevent misuse and keep the website secure.  It is not sold and is not used for unrelated marketing.

Lawful reasons for using information

The main lawful bases are taking steps at your request or performing a contract, for example processing and delivering an order; complying with legal obligations, including tax and accounting requirements; and legitimate interests, such as responding to enquiries, maintaining appropriate records, preventing fraud and operating the website securely.  Where consent is required, you can withdraw it at any time.

Who information may be shared with

Information may be shared only as needed with providers supporting payments, website hosting and forms, email, accounting, IT and delivery, including Stripe and the relevant postal or courier service.  It may also be shared with professional advisers or public authorities where reasonably necessary or legally required.  These providers receive only the information needed for their role.

International processing

Some service providers may process information outside the United Kingdom.  Where this happens, appropriate legal safeguards are used, such as an adequacy decision or approved contractual protections.

How long information is kept

General enquiries are normally kept for up to two years after the last meaningful contact, unless there is a good reason to retain them longer.  Order, payment and accounting records are normally kept for up to six years after the relevant financial year, where required for tax, accounting or legal purposes.  Information is deleted or securely disposed of when it is no longer needed.

Security

Reasonable technical and organisational safeguards are used to protect personal information against loss, misuse, unauthorised access or disclosure.  No online service can guarantee absolute security, but information is limited to what is needed and access is restricted appropriately.

Your rights

Depending on the circumstances, you may have rights to ask for access to your information, correction, deletion, restriction, portability or to object to its use.  You may also withdraw consent where processing relies on consent.  To exercise a right or ask a privacy question, email stevewyattgrowth@gmail.com.

You can also complain to the Information Commissioner's Office at ico.org.uk.  I would appreciate the opportunity to address any concern first.

Updates

This policy will be reviewed when the website, services or legal requirements change.

Last updated: 18 September 2026