Book Categories:
Privacy Policy
Last updated: 6 October 2026
This policy explains how Divinity Creative UK collects, uses and protects your personal information when you visit divinitycreative.com, buy our books and products, download our free resources, join our email list or contact us. We take your privacy seriously and we only collect what we need.
1. Who we are
The data controller is Minesh Pankhania, trading as Divinity Creative UK, based in Leicester, England.
If you have any questions about this policy or your information, email us at info@divinitycreative.com.
2. What information we collect
We collect different information depending on how you use our website.
- When you place an order: your name, delivery and billing address, email address, phone number (if you provide one) and the details of what you ordered.
- When you pay: payment is handled by our payment providers. We do not see or store your full card details.
- When you create an account: your name, email address, password (stored securely) and your order history and wishlist.
- When you join our email list or download a free resource: your name (if asked for) and email address.
- When you contact us or fill in a form: the details you give us, such as your name, email address and your message. If you apply to our Parent and Reviewer Programme, this includes the ages of your children, which you give us only so we can choose a suitable book.
- When you use our DivinityGPT chatbot: the messages you type and any mood or topic you select. Please do not enter sensitive personal information into the chatbot.
- When you browse our website: technical information such as your IP address, device and browser type, the pages you view and how you arrived at our site, collected through cookies and similar technologies (see section 8).
- When you leave a review or comment: your name and the content you submit.
Our website is for parents, carers, teachers and adults. We do not knowingly collect personal information directly from children. If you believe a child has given us their information, please contact us and we will delete it.
3. How and why we use your information
Under UK data protection law we must have a lawful reason for using your information. These are ours:
| What we do | Lawful basis |
|---|---|
| Process, deliver and support your orders, including refunds and returns | Contract (we need this to fulfil your order) |
| Keep accounting and tax records | Legal obligation |
| Send you free downloads and our marketing emails about new books, festival offers and stories | Consent (you can withdraw it at any time) |
| Send you service emails about an order, such as dispatch updates | Contract |
| Reply to your questions and enquiries | Legitimate interests (running our business and helping you) |
| Prevent fraud and keep our website secure | Legitimate interests |
| Understand how our website is used so we can improve it | Consent for analytics cookies where required, otherwise legitimate interests |
| Show you relevant adverts on other platforms | Consent through our cookie banner |
| Run the Parent and Reviewer Programme | Consent and legitimate interests |
| Contact schools and education organisations about our books | Legitimate interests (and you can ask us to stop at any time) |
4. Email marketing
We only send marketing emails to people who have asked to receive them. You can unsubscribe at any time using the link at the bottom of every email or by emailing info@divinitycreative.com. We will never sell your email address.
We use Brevo to store our email list and send our emails.
5. Who we share your information with
We only share your information with trusted organisations that help us run our business, and only as far as they need it to do their job.
- Payment providers to take payment securely.
- Printing and fulfilment partners, such as Gelato, where an item is printed and posted to you directly, and delivery companies such as Royal Mail and couriers.
- Brevo for email delivery.
- Google for website analytics and search reporting (Google Analytics and Search Console through Site Kit).
- Advertising platforms such as Meta and TikTok, but only if you accept marketing cookies.
- Our AI provider for DivinityGPT, which processes the messages you send to the chatbot so it can reply.
- Our website hosting and security providers.
- Our accountant and professional advisers, and public authorities where the law requires it.
We do not sell your personal information to anyone.
6. Transfers outside the UK
Some of our providers, such as Google, Meta, TikTok, Brevo and our AI provider, may process information outside the UK. Where they do, we rely on safeguards required by UK law, such as the UK International Data Transfer Agreement or an approved UK adequacy arrangement, so your information stays protected.
7. How long we keep your information
| Information | How long |
|---|---|
| Order and invoice records | 6 years, to meet tax and accounting rules |
| Customer accounts | Until you ask us to close the account, or after a long period of inactivity |
| Email marketing contacts | Until you unsubscribe |
| Enquiries and messages | Up to 2 years after the last contact |
| Reviewer Programme applications | Up to 12 months after the programme ends, or sooner on request |
| Chatbot conversations | Only as long as needed to run and improve the service, then deleted |
8. Cookies and similar technologies
Cookies are small files stored on your device. We use:
- Essential cookies that keep your basket, checkout and login working. These cannot be switched off.
- Analytics cookies that show us which pages are visited and how people find us.
- Marketing cookies that let advertising platforms measure our adverts and show you relevant ones.
You can accept or reject non-essential cookies using our cookie banner, change your choice at any time, or block cookies in your browser settings. Blocking essential cookies may stop parts of the website from working.
9. Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you
- ask us to correct anything that is wrong or incomplete
- ask us to delete your information, in certain circumstances
- ask us to restrict how we use your information
- object to us using your information for marketing or based on legitimate interests
- ask for your information in a portable format
- withdraw your consent at any time, where we rely on consent
To use any of these rights, email info@divinitycreative.com. We will reply within one month. We may need to check your identity first.
10. Keeping your information safe
We use secure connections (HTTPS), password protection, access controls and reputable providers to protect your information. No system is completely secure, but we take sensible steps to keep your information safe and we will tell you and the regulator if a breach puts your rights at risk.
11. Links to other websites
Our website links to other sites, including Amazon, Spotify, YouTube, Instagram and TikTok. We are not responsible for their privacy practices, so please read their policies when you visit them.
12. Making a complaint
We would like the chance to put things right, so please contact us first at info@divinitycreative.com. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator, at ico.org.uk/make-a-complaint.
13. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page with the date it was last updated at the top.
Contact us
Divinity Creative UK
Leicester, England
Email: info@divinitycreative.com
