Home › Privacy policy
Last updated 19 August 2026. The short version: we collect as little as possible, we do not sell anything about you, and there is no advertising or tracking on this site.
AuditProof, a trading name of The Orderly Co Studio, a sole proprietorship trading from Cape Town, South Africa. For questions, corrections or requests, email hello@auditproof.co.uk.
Because we offer goods to people in the United Kingdom, we handle UK personal data in line with the UK General Data Protection Regulation and the Data Protection Act 2018.
| What | Why | Lawful basis |
|---|---|---|
| Your email address and order details when you buy | To deliver your files, send your receipt, reissue links and send corrections to a document you own | Performance of a contract |
| Your email address if you ask to be told when a toolkit is ready | To send you that one message, and nothing else unless you ask | Consent, which you can withdraw at any time |
| The content of any email you send us | To answer you | Legitimate interests, being able to respond to our own customers |
| Payment details | We never see or hold these. They go directly to our payment provider | Not applicable, we do not process them |
The questionnaire runs entirely in your browser. Your answers are scored on your own device and are not sent to us, not stored, and not associated with you. If you choose to give an email address afterwards to receive the written guide, that is separate and voluntary.
This site sets no advertising cookies, runs no analytics that identify you, and has no tracking pixels or social media widgets. There is nothing here to consent to.
We do not sell, rent or share your personal data with anyone for marketing.
We are based in South Africa, so personal data you give us is accessed from outside the United Kingdom. Our suppliers may also process data outside the UK. Where that happens, transfers are made under the safeguards permitted by UK data protection law, such as the International Data Transfer Agreement or an adequacy decision. South Africa also has its own data protection law, the Protection of Personal Information Act, which applies to us as the responsible party.
Order records are kept for seven years, because tax rules require it. Emails asking to be told when a toolkit is ready are deleted once that message has been sent or when you unsubscribe, whichever comes first. General correspondence is kept for two years and then deleted.
You can ask us to give you a copy of what we hold, correct it, delete it, restrict what we do with it, or object to it. You can withdraw consent at any time. There is no charge and no form. Email hello@auditproof.co.uk and we will respond within one month.
If you are not satisfied with how we have handled a request, you can complain to the Information Commissioner's Office at ico.org.uk, or to the Information Regulator in South Africa.
If this policy changes materially we will say so here and update the date at the top.