Privacy Policy
This is a short, plain-English version of how ExternalOS handles your data. If anything here is unclear, email hello@externalos.com and a human will reply.
Who we are
ExternalOS is a UK sole trader based in Leeds, England, operating the website at externalos.com and selling digital files via externalos.gumroad.com. Contact: hello@externalos.com.
What we collect
Newsletter signup
If you give us your email for the newsletter, we store your email address and the date you signed up. That is it. No name, no address, no phone.
Purchases
When you buy a file, the transaction happens on Gumroad. Gumroad collects payment details, delivery email, and billing country for VAT. We do not see or store your card details. We receive your email and order reference from Gumroad so we can send updates when legislation changes.
IR35 checker
The free IR35 checker runs entirely in your browser. Your answers never leave your device. We do not log, store, or transmit your responses.
Analytics
The site currently runs no analytics, no tracking pixels, no behavioural cookies. If that changes, this page will change first.
Essential cookies
None are set by ExternalOS. Google Fonts and Gumroad checkout may set their own, governed by their policies.
Why we can hold your data (lawful basis)
- Consent, for newsletter signup. You opted in, you can opt out at any time.
- Contract, for purchases. We need your email to deliver the file and lifetime updates you paid for.
- Legitimate interest, for responding to support emails and keeping basic order records for accounting.
Who we share data with
- Gumroad, payment and delivery (US, privacy-shield successor frameworks apply).
- Formspree, form submission relay for the newsletter signup (US).
- Zoho Mail, inbound email hosting (Netherlands/India).
- GitHub Pages, static site hosting (US).
We do not sell your data. We do not share it with advertisers. We do not build profiles or use automated decision-making.
How long we keep it
Newsletter emails are kept until you unsubscribe. Order records are kept for six years, the HMRC minimum for self-assessment records. Support emails are kept for two years and then deleted.
Your rights
Under UK GDPR you can ask us to:
- Show you what data we hold about you.
- Correct it if wrong.
- Delete it (right to erasure).
- Export it in a portable format.
- Stop using it for a specific purpose.
Email hello@externalos.com with the request. We will respond within 30 days, usually much sooner.
Complaints
If you think we have mishandled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes to this policy
When we change this page, the "Last updated" date at the top changes too. Material changes will be announced in the newsletter.