We use your address once, to send this file.

There is no list, no newsletter and no follow-up. This page describes exactly what happens to the data you give us, in the order it happens.

What we collect

• Your email address — so we can send you the download link.
• Your IP address and browser user agent — recorded with the request, to stop the form being abused and to keep an audit trail of downloads.
• When you consented, and to what wording — so we can show what you agreed to.
• Whether and when the download completed — this is how we know one address has received the playbook.

There is no analytics, no advertising, and no third-party script on this site. The typefaces are served from our own server rather than a font CDN, so loading this page tells nobody else that you visited.

Why we are allowed to hold it

Your consent, given by ticking the box on the form. You can withdraw it at any time, and withdrawing it deletes the record.

How long we keep it

Up to 24 months, then it is deleted automatically. Your download link expires after 30 days or once the download completes, whichever comes first.

Who else sees it

Our email provider, because it has to handle the message in order to deliver it. Nobody else. We do not sell, share, rent or trade it, and there is no arrangement under which we could.

Your rights

Under the UK GDPR and the EU GDPR you can ask for a copy of what we hold, ask us to correct it, or ask us to erase it. Every email we send carries a one-click erasure link, or you can write to contact@dsfx.org and we will action it.

Cookies

The public pages set none. Signing in to the administration area sets one session cookie, which is strictly necessary for that page to work and is deleted when you sign out.