Privacy Policy
Who holds your information
Simple to Complex, a trading name of Kamran Sikander, Unit 3 Firhill Business Centre, 74 Firhill Road, Glasgow G20 7BA, United Kingdom. We are the data controller. Email info@simpletocomplex.com — every message is answered by us, not a helpdesk.
What we hold, and why
Your email address, an encrypted password, your household name, the date your access ends, and a record of what you agreed to at checkout. We hold these to give you the account you paid for, and to be able to show what you consented to if a payment is ever queried. The lawful basis is performance of our contract with you; the consent record is kept because consumer law requires us to be able to evidence it.
We do not run analytics trackers, we do not advertise to you, and we never sell or share your information. Your reading position is stored in your own browser and never reaches us.
Signing in
When you sign in, we store a random identifier in your browser and keep a short record against your account of the devices that have signed in: that identifier, the date, a rough description of the device ("iPad", "Windows PC"), and the first half of the internet address it connected from. It is there for one reason — to tell a single household apart from a password being passed around — and each record is deleted after 90 days. We do not track you between visits, we build no profile from it, and it is never shared. Our lawful basis is our legitimate interest in keeping a household licence from being used as a group one.
Children
The Booster Course is written for children aged about 11 to 14, but the account belongs to a parent or guardian, and we hold no personal information about any child.
We do not ask for your child's name, age, school or year group, and there is no separate login for them. We do not record which pages they read, which questions they attempt, or how they answer. Nothing your child writes in their notebook comes near us.
The reader remembers where a child last read so they can pick up again. That is stored in the browser on your own device and is never sent to us — clearing your browser data removes it, and it does not follow anyone to another device.
There are no adverts, no tracking, no profiling and no recommendations anywhere in the course. There are no streaks, points or timers: the work is done on paper, and the site is not built to keep a child on a screen.
We have considered the Information Commissioner's Age Appropriate Design Code in building this service. If you think we have got any of this wrong, please tell us at info@simpletocomplex.com and we will look at it.
Who else sees it
Two companies handle information on our behalf. Nobody else does.
- Stripe takes the payment. Your card details go straight to Stripe and never touch our servers. Stripe's privacy policy.
- Brevo sends our email — your welcome message and any password reset you ask for. Your email address and household name are shared with Brevo for that purpose only. Brevo's privacy policy.
Where it is kept
Our server is in Germany. The UK recognises Germany as providing equivalent protection for personal information, so no additional safeguards are needed.
How long we keep it
While your access is live, and for 12 months after it ends — so that we can restore your account if you come back, and answer any question about a payment. After that we delete it. Because we also keep backups, a copy can remain in those for up to six months after deletion before it is overwritten. We never use a backup copy for anything except restoring the service.
Your rights
You can ask us for a copy of your information, correct it, have it deleted, or object to how we use it. Email info@simpletocomplex.com and we will answer within one month, free of charge. If a request is complicated we may extend that by up to two further months, and we will tell you why. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.