Privacy
Privacy policy
Last updated: 18 October 2026
The short version
- This website sets no cookies and has no analytics. Some links go to other shops (marked Ad) which may set their own cookies once you click through.
- There's no sign-up form or mailing list on this website, so we don't collect email addresses through it.
- If you email us, we use your details only to reply to you.
- We never sell your details or share them for anyone else's marketing.
1. Who we are
This website, thecoeliacparent.com, is run by Steve Higham, trading as The Coeliac Parent, a sole trader based in the UK. We are the data controller for the personal information described in this policy, which means we decide how it is used and we're responsible for looking after it.
Postal address available on request by email.
Email: thecoeliacparent@gmail.com
2. What we collect, why, and the legal basis
| When | What | Why | Legal basis |
|---|---|---|---|
| You email us | Your email address, name and anything you include in your message | To reply to you | Our legitimate interest in answering your questions |
| You buy from our Etsy shop | The order details Etsy shares with sellers, such as your name, Etsy username, what you bought and any messages you send us | To provide your download, answer questions and keep the business and tax records the law requires | To perform our contract, and to meet our legal obligations |
| You visit this website | Standard technical information that any website host receives, such as your IP address, browser type and the pages requested | To deliver the website to you and keep it secure | Our legitimate interest in running a secure website |
If we start an email newsletter in future, we'll update this policy before collecting any sign-ups. Please don't send us your child's details. If you think a child has given us their details, contact us and we'll delete them.
3. Who we share it with
We only share personal information with the services we need to run The Coeliac Parent:
- Etsy, which runs the shop where our products are sold. Etsy handles your account, your payment and your order as a separate data controller, under Etsy's privacy policy. We never see your card details.
- Our website host, Netlify, Inc. (USA), which delivers this website and processes the technical information described above. See Netlify's privacy statement.
- Our email provider, Google (Gmail), which stores emails you send us.
- Our accountant and HMRC, where needed for tax and business records.
We never sell your personal information, and we never share it with anyone for their own marketing.
4. Transfers outside the UK
Our website host, Netlify, Inc., and our email provider are based in the USA, so your information may be stored or processed there. Where that happens, it is protected under UK law, for example through the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum to the standard contractual clauses. You can contact us for more details.
5. Cookies and tracking
This website sets no cookies and has no analytics or tracking scripts of its own, so there's no cookie banner. The fonts and images are stored on this website, so nothing is loaded from other companies when you visit.
Links to other websites: when you follow a link to another website, such as our Etsy shop, Bookshop.org UK or Coeliac UK, that website's own privacy and cookie policies apply. Some links on this website go to other shops and are affiliate links, marked Ad. Once you click through, those shops may set their own cookies and may use them to record that you came from our website, so that we can earn a commission if you buy. We don't set those cookies, and they handle your visit, order and payment themselves. We never see your card details. See the affiliate disclosure.
6. How long we keep it
- Emails with us: up to 2 years after our last contact, unless they're part of an order.
- Order and business records: as long as the law requires. For a sole trader, HMRC requires records to be kept for at least 5 years after the 31 January submission deadline of the relevant tax year.
- Website server logs: for the short period set by our website host.
7. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct it if it's wrong;
- ask us to delete it;
- ask us to restrict how we use it, or object to our using it;
- ask for it in a format you can take elsewhere (data portability).
To use any of these rights, email thecoeliacparent@gmail.com. It's free, and we'll reply within one month.
8. Keeping it safe
We use reputable services with strong security, protect our accounts with strong passwords and two-step verification, and only keep what we need.
9. Complaints
If you're unhappy with how we've handled your information, please contact us first at thecoeliacparent@gmail.com and we'll do our best to put it right.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint.
10. Changes to this policy
If we change how we use your information, for example by starting a newsletter, we'll update this page and the date at the top before the change takes effect.