Privacy & Cookie Policy

Effective date: 1 March 2026  |  Last updated: 8 October 2026

This policy explains how lcwilkinson.com collects, uses, and protects any information you provide when using this website. We take your privacy seriously and are committed to full compliance with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

1. Data Controller

This website and its newsletter are run by Leah's publisher, Cohort North Publications, which is the data controller for the information collected here.

Cohort North Publications
Post: Unit 171794, PO Box 7169, Poole, BH15 9EL
Email: dpo@cohortnorth.com
Website: cohortnorth.com

2. What Data We Collect

We collect only the personal information you voluntarily provide.

When you submit the contact form:

When you sign up to the newsletter:

When you buy a book direct:

We do not collect any other personal data. We do not use analytics tools, tracking pixels, or behavioural profiling of any kind.

3. How We Use Your Data

The information you send via the contact form is used solely to respond to your enquiry. It is not shared with any third party, sold, or used for any marketing purpose.

Buying a book

Your order is used to post your book, to email you about it (a receipt, and again when it is posted), and for our accounts. You pay on a secure page run by Stripe, which handles your card details under its own privacy policy; we never see them. The order is kept by Cohort North Publications on its website's server, run by Hostinger in the UK. Leah sees your name, email address, delivery address and any dedication, so she can sign and post your book and answer any questions about it. The emails about your order are sent by Amazon Web Services from its Stockholm region in the European Union.

The tick box to join the newsletter is never ticked for you. If you tick it, you are added to the newsletter after you have paid.

The newsletter

When you sign up you are added straight away. Your details are used only to send you the newsletter.

The list is kept on a server in the United Kingdom run by Cohort North Publications. The emails are delivered by Amazon Web Services from its Stockholm region in the European Union, which handles them only to deliver them. We do not track whether you open the emails or which links you choose.

Every newsletter has an unsubscribe link, which also lets you download or delete everything held about you.

4. Data Retention

Emails received via the contact form are retained only for as long as necessary to resolve your enquiry. Once resolved, they are deleted. We do not maintain a long-term contact database.

Orders: your name, email address, delivery address and any dedication are deleted two years after your order. What was bought and the amount are kept for six years, as the law requires for our tax records.

Newsletter details are kept until you unsubscribe. After that only your email address is kept, marked as unsubscribed, so that you are never emailed again; ask and it will be deleted too.

5. Cookies & Tracking

This website uses no tracking or analytics cookies. We use localStorage (browser storage, not a cookie) solely to remember whether you have acknowledged this privacy notice — no personal data is stored in this way.

Google Fonts are loaded from Google's CDN to display our chosen typefaces. This may result in your browser making a request to Google's servers. Please refer to Google's Privacy Policy for information on how they handle such requests. No other third-party scripts are loaded.

6. Your Rights Under UK GDPR

As a data subject, you have the following rights:

To exercise any of these rights, please use the contact form or email dpo@cohortnorth.com. We will respond within one calendar month.

If you are unhappy with how your data has been handled, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

7. International Transfers

Newsletter and order emails are delivered by Amazon Web Services from Stockholm, in the European Union, which UK law recognises as protecting personal data adequately. Stripe, which takes card payments, may handle your payment details in the United States under safeguards approved under UK law; see its privacy policy.

8. Changes to This Policy

We may update this policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date.