Candidmark

Privacy notice

Last updated: 11 November 2026.

This notice explains how personal information is used when you visit candidmark.com, request the free 10 UK Deal Red Flags checklist, email us, or buy the UK Deal Screen Kit.

1. Who we are

The data controller is Neil Phillips, a sole trader trading as Candidmark.

• Address: 20 Greenfield Ave, Whitchurch, Cardiff CF14 1TF, United Kingdom
• Email: hello@candidmark.com

If you have any question about this notice or about your information, email that address.

2. What we collect, and why

We only collect what we need for the request you have made. We do not buy mailing lists, and we do not add anyone who has not opted in.

The free checklist and follow-up emails

If you submit the signup form, we collect your email address and, if you choose to give it, your first name. We use these to send you the checklist PDF and the short follow-up sequence you agreed to, and to manage your subscription (including unsubscribe requests). The lawful basis is consent. Under the Privacy and Electronic Communications Regulations (PECR), we also rely on that consent to email you. You can withdraw consent at any time by using the unsubscribe link in any of those emails, or by emailing us. Withdrawing consent does not affect anything already done while consent was in place.

Purchases of the UK Deal Screen Kit

If you buy the kit, we (and our payment and delivery providers) process the purchase details needed to take payment, deliver the download, issue a receipt, and deal with refunds or questions about your order. That typically includes your name, email address, billing country or address, payment status and a record of what you bought. We do not see or store your full payment card number. The lawful basis is contract (to provide the kit you have bought). We may also keep purchase and invoice records because UK tax and accounting rules require it; the lawful basis for that limited use is legal obligation.

Checkout, card payment and delivery of the file are handled on Payhip, not on this website. Payhip’s public documentation states that if a customer is buying a digital product in the UK or EU, Payhip acts as reseller and is responsible for digital UK and EU VAT: it detects location, applies the correct VAT, and reports and remits the VAT it collects. Payhip is not a worldwide merchant of record. Payhip and Stripe have their own privacy notices, linked below.

If you email us

We keep the content of the correspondence so we can reply, and so we can deal with a later refund or complaint if needed. The lawful basis is our legitimate interest in answering you, or contract if you are writing about a purchase.

Technical logs

The host of this website may record ordinary technical data, such as your IP address, browser type, and the pages requested, to keep the site secure and to see, in aggregate, whether it is working. The lawful basis is legitimate interests (running and protecting the site).

We do not use your information to make automated decisions about you that have a legal or similarly significant effect. This site is not intended for children.

3. Who we share it with

We do not sell your personal information. We use the service providers below to run the site, send email, and (if you buy) take payment and deliver the kit. They only process the information needed to do that work for us. We will not pass your details to anyone else unless the law requires it.

• MailerLite Limited (Ireland, for UK customers) — the signup form, email delivery and the short follow-up sequence. MailerLite’s public terms say that for customers in the UK, subscriber data does not leave the EU and is hosted in the EU. See mailerlite.com/legal.
• Payhip Limited — the product page, checkout, delivery of the download, purchase records, and, for digital products sold to UK or EU customers, collecting, reporting and remitting digital UK/EU VAT as reseller, according to Payhip’s published VAT terms. See payhip.com/privacy and Payhip’s VAT pages.
• Stripe — card payments, through Payhip’s checkout. We do not receive your full card number. See stripe.com/privacy.

If we later add another provider (for example a second payment method), we will name it here.

4. International transfers

Some of our providers may store or process information outside the United Kingdom.

• For the mailing list, MailerLite’s public terms say that UK customers’ subscriber data stays in the EU.
• Payhip’s privacy policy says information is stored on servers in the EU, but may be transferred outside the EEA with a lawful safeguard.
• Stripe may process payment information in the UK, the EEA and other countries, including the United States, using a lawful transfer mechanism.

Where a transfer outside the UK takes place, we rely on a mechanism recognised by UK law, such as an adequacy regulation, the UK Addendum to the EU standard contractual clauses, or the UK Extension to the EU-US Data Privacy Framework, as the relevant provider applies them.

5. How long we keep it

• Marketing email details are kept while you remain subscribed. After you unsubscribe, we delete you from the mailing list. We may keep a simple record of your email address on a suppression list so that we do not email you again by mistake.
• Purchase and invoice records are kept for as long as UK tax and accounting rules require. Payhip also keeps purchase records under its own policy.
• Correspondence is kept only for as long as we need it to deal with your question, a refund, or a complaint, and then deleted or reduced to a minimal record if we still need to show that the matter was closed.
• Technical logs are kept only for a short period, according to the host’s normal settings, unless we need a log to investigate a security problem.

6. Your rights

You can ask us for a copy of the personal information we hold about you, ask us to correct it, delete it, or restrict or object to certain uses, and (where the lawful basis is consent) withdraw that consent at any time. Where you provided the information to us and the basis is consent or contract, you can also ask us to give it back to you in a reasonable format, or to pass it to another service if that is technically feasible.

To exercise a right, email hello@candidmark.com. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk. We would rather you emailed us first so we can try to help.

7. Unsubscribing

Every marketing email from us includes a one-click unsubscribe link. You can also email hello@candidmark.com and ask to be removed. Unsubscribing from the checklist emails does not cancel a kit purchase, and buying the kit does not sign you up to the mailing list.

8. Cookies

This website is a static page. It does not itself set marketing or analytics cookies, and we do not use advertising trackers on it.

• The MailerLite signup form, once embedded, may set cookies that it needs in order to work. We will update this section if it does.
• If you click through to buy the kit, you leave this site and use Payhip’s checkout, which has its own cookies and its own privacy notice.
• We will add a consent choice if we ever use non-essential cookies.

9. Changes

If we change this notice in a material way, we will update this page and the date at the top. If you are on the mailing list and the change is significant, we will also email you.