Scot n Nerdy Privacy Notice

Last updated: 2026-07-13

Initial public draft: this notice is being published early so product and checkout pages have a stable reference. It should still be reviewed and refined as Scot n Nerdy grows.

This notice explains how Scot n Nerdy handles personal data when you buy, download, access, or use our software, digital products, licences, subscriptions, support, or usage-based packages, including CrateWin.

This is a general notice for the current direct-download CrateWin setup and future Scot n Nerdy products. A product-specific privacy notice may add more detail for a particular product.

Contact

Scot n Nerdy is responsible for the personal data described in this notice.

Email: info@scotnnerdy.com

For CrateWin support, email cratewinhelp@scotnnerdy.com.

Trading address: not yet published. Please contact us by email for formal correspondence while these pages are being completed.

Personal Data We Collect

Depending on how you interact with us, we may collect:

• checkout and order details, such as name, email address, business name, product purchased, price, tax status, payment status, and order identifiers;
• licence and fulfilment records, such as licence key metadata, delivery status, entitlement type, support entitlement, and refund or dispute status;
• support messages and related information you send to us;
• security reports or abuse reports you send to us;
• limited technical records needed to operate fulfilment systems, such as webhook event identifiers, delivery logs, and error logs; and
• public release download counts or repository metrics provided by hosting platforms such as GitHub.

Payment card details are processed by Stripe or another payment provider. We do not store full card numbers.

For CrateWin, normal packaging, verification, and unpacking happen locally on your Mac. CrateWin does not upload installers, package contents, filenames, package metadata, conversion history, usage volume, output filenames, throughput data, or usage analytics to us during normal packaging.

How We Use Personal Data

We use personal data to:

• process purchases and payments;
• issue, deliver, verify, and support licences and entitlements;
• provide downloads, updates, product notices, and support;
• handle refunds, disputes, chargebacks, tax records, and accounting records;
• secure our products, fulfilment systems, payment flows, and support channels;
• investigate bugs, abuse, fraud, or security reports;
• comply with legal and regulatory obligations; and
• understand basic product distribution signals, such as public download counts.

Legal Bases

Where UK GDPR or EU GDPR applies, our legal bases may include:

• contract, where processing is needed to sell, deliver, license, support, or administer a product you bought or requested;
• legitimate interests, where processing is needed to secure systems, prevent fraud, keep business records, improve support, or understand basic product distribution, balanced against your rights;
• legal obligation, where processing is needed for tax, accounting, consumer, security, or regulatory duties; and
• consent, where we ask for optional consent for a specific purpose.

We do not rely on consent for ordinary order fulfilment unless the checkout flow expressly asks for a specific consent, such as immediate digital delivery consent.

Sharing Personal Data

We may share personal data with:

• payment processors, including Stripe;
• email and fulfilment providers used to send licence or support messages;
• hosting, repository, cloud, and infrastructure providers used to provide downloads and fulfilment;
• professional advisers, accountants, insurers, banks, or dispute handlers;
• law enforcement, regulators, courts, or public authorities where required or appropriate; and
• a buyer, successor, or adviser if we reorganise, sell, or transfer part of the business.

We do not sell personal data.

International Transfers

Some providers may process personal data outside the UK or your home country. Where required, we use appropriate safeguards or rely on lawful transfer mechanisms provided by the relevant provider.

Retention

We keep personal data only as long as needed for the purposes above.

Typical retention periods may include:

• order, licence, payment, refund, dispute, tax, and accounting records for as long as needed for legal, accounting, tax, and dispute purposes;
• support records for as long as needed to handle the request and maintain reasonable product history;
• security reports for as long as needed to investigate, remediate, and evidence the issue; and
• logs for a shorter operational period unless needed for security, fraud, dispute, or legal reasons.

Your Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal data. You may also have the right to complain to a data protection regulator.

In the UK, the regulator is the Information Commissioner’s Office: https://ico.org.uk/

To make a request, email info@scotnnerdy.com.

Marketing

We do not use checkout terms as consent for marketing.

If we send optional marketing, we will do so only where we have a lawful basis and any required consent or soft opt-in conditions are met. You can opt out of marketing messages.

Service, licence, security, support, fulfilment, and transactional messages are not marketing.

Cookies, Analytics, And Telemetry

The current CrateWin app does not send usage analytics or package telemetry to us during normal packaging.

Public download hosts, payment processors, and website providers may collect their own technical information under their own notices.

If a future product uses cookies, analytics, crash reporting, diagnostics, or telemetry, the product or website should explain that separately.

Changes

We may update this notice as products, providers, or legal requirements change. The latest version should be published with the relevant product or website materials.