Last updated: 25 April 2026
Who we are
The Income Toolkit is operated by Claire Lawrence, a sole trader trading as The Income Toolkit. You can reach us at info@theincometoolkit.com.
For UK GDPR purposes, we are the data controller for personal data you provide on this site.
What this policy covers
This policy explains what personal data we collect from you, how we use it, who we share it with, how long we keep it, and the rights you have over it. It applies to anyone who visits theincometoolkit.com, downloads a free resource, joins our newsletter, creates an account, or buys a paid product or membership.
What we collect
We collect personal data in four ways.
1. Information you give us directly
When you sign up to The Dispatch newsletter, register for an account, or buy a product, you give us:
- Your name and email address.
- A username and password if you create an account.
- Billing details, which are passed directly to Stripe (we do not see or store your full card number).
- Anything you put in a contact-form message or support email.
2. Information we collect automatically
When you visit the site we collect:
- Your IP address.
- Your browser type, language and operating system.
- The pages you visit, when you visit them, and where you came from.
- Cookies and similar technologies (see Cookies below).
3. Information from third parties
- Confirmation from Stripe that a transaction has succeeded or failed.
- Aggregate site analytics from Google Analytics.
4. Information from your account activity
If you are a registered user or paid member:
- Posts and replies you make in the community area.
- Records of which toolkits you have downloaded.
- Membership level, billing status and renewal dates.
Why we use it (lawful basis)
UK GDPR requires us to have a lawful reason for using your personal data. Ours are:
Contract. When you buy a product or join a membership, we process your data to deliver the product, manage your account, and provide customer support.
Legitimate interests. We use Google Analytics to understand which pages perform well, send transactional emails (receipts, password resets, renewal reminders), and keep records to detect fraud and protect the site against abuse. You can object to processing based on legitimate interests at any time.
Consent. We send The Dispatch newsletter, set non-essential cookies, and use marketing tracking only with your consent. You can withdraw consent at any time, with no effect on the lawfulness of processing before that point.
Legal obligation. We keep transaction records for the periods required by HMRC for tax purposes, currently six years.
Cookies
A cookie is a small text file stored on your device. We use:
Strictly necessary cookies that keep you logged in, remember your cart contents, and protect against form spam. These do not need consent.
Functional cookies set by our membership and shop plugins to remember your preferences.
Analytics cookies from Google Analytics (cookies prefixed _ga and _gid) that help us understand site usage in aggregate. These are set only with your consent.
We do not currently set advertising cookies.
You can manage cookies via the cookie banner on first visit and via the cookie settings link in the site footer. You can also block cookies in your browser, though parts of the site may not work properly if you do.
Who we share your data with
We share your data only with the following processors, and only as needed to run the site:
Stripe processes your payment when you buy a product or join a membership. Stripe is the data controller for the payment data it holds. See stripe.com/privacy for details.
ConvertKit sends The Dispatch newsletter and our transactional account emails. Your name and email are stored with them. See convertkit.com/privacy for details.
Hostinger hosts the site. Server access logs are held by them. See hostinger.com/privacy-policy for details.
Google Analytics receives anonymised usage data so we can understand site performance. We use IP-anonymisation where available. See policies.google.com/privacy for details.
We do not sell your data, ever. We do not share your email address with any third party for their own marketing.
International transfers
Stripe, ConvertKit and Google all process some data outside the UK, primarily in the United States. Where that is the case, your data is protected by either UK adequacy regulations (the UK Data Bridge for the US) or by Standard Contractual Clauses with appropriate supplementary measures.
How long we keep your data
- Newsletter subscribers: until you unsubscribe, plus a short suppression-list period to honour the unsubscribe.
- Account holders: while your account is active, plus six years after closure for HMRC tax record retention.
- Customers: six years from your last purchase, for tax and warranty purposes.
- Contact-form messages: up to two years.
- Server access logs: up to ninety days.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Have inaccurate data corrected.
- Request that we erase your data, subject to our legal retention obligations.
- Restrict how we process your data.
- Object to processing based on legitimate interests.
- Withdraw consent for marketing or non-essential cookies at any time.
- Receive a portable copy of the data you provided.
- Lodge a complaint with the Information Commissioner’s Office at ico.org.uk or 0303 123 1113.
To exercise any of these rights, email info@theincometoolkit.com. We will respond within thirty days.
Children
This site is not aimed at people under 16. We do not knowingly collect data from children. If you are a parent or guardian and believe your child has provided us with personal data, contact us and we will delete it.
Security
We use HTTPS across the site, store passwords using one-way hashes, restrict admin access to known accounts only, and keep our software and plugins up to date. No system is completely secure, but we treat your data as if it were our own.
Changes to this policy
If we change this policy, we will update the “last updated” date at the top of this page. If the change is significant, we will let you know by email if you are a registered user.
Contact
For any privacy question, email info@theincometoolkit.com. If you are not satisfied with our response, you can complain to the ICO at ico.org.uk.