Legal · Updated 27 August 2026
Privacy Policy
This notice explains how Offscroll Times handles personal data for accounts, orders, delivery, support and legal compliance.
Controller and contact
The legal entity name, registered address, registration and tax identifiers, and named grievance contact must be inserted before launch. Current support: hello@offscrolltimes.com.
Data we use
- Google or Microsoft identity identifier, name and verified account claims.
- Delivery and billing address versions, phone where needed, and order details.
- Subscription, fulfilment, shipment, enquiry, refund and audit records.
- Razorpay payment identifiers, status and amount—not raw card details.
- Essential session, rate-limit and fraud-prevention signals.
Purposes and legal bases
We use data to perform the purchase and delivery contract, meet tax and consumer-law obligations, secure the service under legitimate interests where permitted, and respond to requests. Future non-essential marketing requires a separate valid choice and is not a condition of purchase.
Recipients and transfers
Necessary data may be shared with Google or Microsoft for sign-in, Razorpay for payment, Cloudflare for hosting, and printers, couriers or advisers where operationally necessary. Contact enquiries are stored for support and shared with FormSubmit to forward your name, reply email, country, enquiry details and message to hello@offscrolltimes.com. Before European launch, transfer locations and required safeguards must be documented. We do not sell personal data.
Retention
Account and fulfilment data is kept while needed to provide service. Financial and tax records remain for the legally required period; support and security records follow documented schedules. Data is deleted or anonymised when no longer required, subject to legal holds.
Your rights
Depending on location, you may request access, correction, deletion, restriction, portability or objection, withdraw consent, and complain to a regulator. Use profile privacy controls or contact support. We aim to answer within one month where GDPR applies.
Children and security
The service is not directed to children purchasing independently. We use access controls, encryption in transit, audit records and limited retention. We do not make solely automated decisions producing legal or similarly significant effects.