Privacy Policy
Last updated: 8 August 2026
This Privacy Policy explains how Phil Choi collects, uses and protects your personal information when you visit this website or contact me about WordPress services, website support, digital products or related enquiries.
Who I am
This website is operated by:
Phil Choi
Website: https://philchoi.com
Email: hello@philchoi.com
Location: United Kingdom
For the purposes of UK data protection law, I am the data controller for the personal information collected through this website.
What personal information I collect
I may collect the following information when you use this website:
- your name
- your email address
- your website URL
- information submitted through contact forms or other forms
- information about your project, business or website
- billing information, such as your billing address and country
- customer-account information
- order details, purchase history and payment status
- records of access to digital products and downloads
- communications relating to purchases, enquiries or support
- basic technical information, such as your IP address, browser type, device type and pages visited
- cookie and analytics data, where applicable
Card and payment-account details are collected and processed securely by payment providers such as Stripe or PayPal. I do not receive or store your full card details.
How I collect information
I collect information when you:
- submit a contact form
- make an enquiry about a service
- request support or a quote
- sign up to an email list, if available
- buy or download a digital product, if available
- browse the website
Why I use your information
I use your information to:
- respond to your enquiries
- provide quotations or information about services
- provide and manage client services
- process orders and confirm payments
- create and manage customer accounts
- deliver digital products and maintain download access
- send essential order, account and product-access emails
- provide customer support
- improve and secure the website
- understand how the website is used
- prevent fraud or misuse
- comply with legal, tax and business record-keeping obligations
Lawful basis for using your information
Depending on the situation, I process your information under one or more of the following lawful bases:
- Consent — for example, when you choose to sign up to a mailing list.
- Contract — when I need your information to provide a service you have requested.
- Legitimate interests — for example, to respond to enquiries, manage client relationships and improve this website.
- Legal obligation — where I need to keep records for tax, accounting or legal purposes.
Contact forms
When you submit a form on this website, the information you provide is used to respond to your enquiry.
Your details are not sold or shared for unrelated marketing purposes.
Form submissions may be stored in this website’s database, sent to my email inbox, or processed through the form plugin or email delivery service used by this website.
Analytics
This website does not currently use Google Analytics. Some services used to operate, secure or process transactions on the website may collect limited technical or usage data as part of providing their services.
Cookies
Cookies are small files stored on your device when you visit a website.
This website may use cookies for:
- essential website functionality
- security
- remembering preferences
- analytics, if enabled
- embedded content, if used
Essential cookies are required for the website to work properly. Non-essential cookies, such as analytics or marketing cookies, should only be used with your consent.
You can usually control or delete cookies through your browser settings.
Embedded content from other websites
Pages or posts on this website may include embedded content, such as videos, images, social media posts or external tools.
Embedded content from other websites behaves in the same way as if you visited those websites directly. Those websites may collect data about you, use cookies, and track your interaction with the embedded content.
Who I share your information with
I only share personal information where necessary to operate this website, provide products and services, process payments, or meet legal obligations.
This may include:
- SureCart — to manage checkout, customer accounts, orders, purchase records and access to digital products
- Stripe — to securely process card and supported wallet payments
- PayPal — when you choose to pay using PayPal
- website hosting, email and delivery providers — to operate the website and send transactional emails
- Google services — where features such as address autocomplete are used
- analytics providers — where analytics are used to understand and improve the website
- professional advisers, regulators or authorities — where reasonably necessary or required by law
Some of these providers operate internationally. This means your information may be processed in countries other than the country where you live, including outside the United Kingdom. Where required by UK data protection law, appropriate safeguards are used for international transfers.
I do not sell your personal information.
How long I keep your information
I only keep personal information for as long as necessary for the purpose for which it was collected, including providing products and services, maintaining digital access, and meeting legal obligations.
Typical retention periods are:
- contact form enquiries: up to 12 months
- client records: for the duration of our working relationship and for a reasonable period afterwards
- customer accounts and digital-product access records: while the account or access remains active, subject to legal and record-keeping requirements
- order, payment and tax records: normally for six years, or longer where required by law
- email marketing records: until you unsubscribe or ask for removal; I may retain a minimal suppression record to ensure you are not contacted again
When information is no longer required, it is securely deleted or anonymised.
Your rights
Under UK data protection law, you may have the right to:
- access the personal information held about you
- ask for inaccurate information to be corrected
- ask for your information to be deleted
- restrict how your information is used
- object to certain types of processing
- receive certain information in a portable format
- withdraw consent where consent is the lawful basis
These rights may depend on the circumstances and are subject to legal limitations. Depending on where you live, you may also have additional rights under your local privacy laws.
To exercise your rights, contact me at:
You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk. If you live outside the UK, you may also be able to complain to the relevant data protection authority where you live.
Security
I take reasonable steps to protect your personal information, including using secure website hosting, access controls and appropriate WordPress security practices.
However, no website or online system can be guaranteed to be completely secure.
Changes to this policy
This Privacy Policy may be updated from time to time to reflect changes to the website, services, tools or legal requirements.
The latest version will always be available on this page.
