Privacy Policy

AI Machine is the data controller for the personal data described in this policy. We are an online business operated from the United Kingdom, and we process personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact for any privacy matter: support@thedigitalmachine.co.

Order data: your email address, what you bought, the amount paid, the time of purchase, and your order reference.

Technical data: basic server and security logs (such as IP address and browser type) used to keep the store running and prevent fraud.

We deliberately do not collect more than this. There are no customer accounts, no newsletters unless you explicitly opt in, and no tracking of your behaviour across other sites.

Your payment card details are entered directly into Stripe's secure checkout. Full card numbers and security codes never touch our servers — we only receive confirmation that a payment succeeded, the amount, and a transaction reference.

To process your payment and deliver your purchase, including sending your receipt and download link by email.

To provide customer support when you contact us, and to restore download access if a link expires.

To meet legal, tax, and accounting obligations (UK law requires us to keep transaction records for a number of years), and to detect and prevent fraud.

Our lawful bases are: performance of a contract (delivering what you bought), legal obligation (tax records), and legitimate interest (security and fraud prevention). We do not use your data for marketing without your consent.

Stripe (payments): processes your payment under its own privacy terms.

Our hosting and storage providers: hold the order records and product files so we can deliver them to you.

We never sell, rent, or trade your personal data to anyone, and we do not share it with advertisers.

Some providers process data outside the UK. Where this happens, transfers are protected by adequacy regulations or standard contractual clauses approved for international transfers.

Order and transaction records are kept for as long as UK tax and accounting law requires (typically up to 6–7 years), after which they are deleted.

Emails and support correspondence are kept only as long as needed to resolve your query.

Under UK GDPR you have the right to: access a copy of your data; correct inaccurate data; request deletion (subject to legal record-keeping duties); restrict or object to processing; and request a portable copy of your data.

To exercise any right, email support@thedigitalmachine.co. We respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.

This store uses only strictly necessary technical storage required for the checkout and download flow to function. We do not use advertising or cross-site tracking cookies.

We use industry-standard encryption in transit, access controls, and time-limited signed download links to protect your data and your purchase.

Our products are not directed at children under 18, and we do not knowingly collect data from them.

We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use of the store after a change means you accept the updated policy.