Privacy Policy

1. Who we are

DocPilot is a UK-based legal document template service operated by D. Osborne (sole trader), trading as DocPilot, Gosport, Hampshire, United Kingdom. Our website is docpilot.to.

We are the data controller for the personal data you provide when using this website or purchasing our products. You can contact us at any time at hello@docpilot.to.

2. Data we collect

When you make a purchase

All purchases are processed by Lemon Squeezy, our third-party payment provider. When you buy a template, Lemon Squeezy collects your name, email address, and payment details. We receive your name, email address, and details of what you purchased. We do not receive or store your full card number.

When you sign up to our email list

If you choose to subscribe via our website, we collect your email address. This is handled through ConvertKit, our email marketing platform.

When you contact us

If you email us at hello@docpilot.to, we collect your name, email address, and the content of your message in order to respond to your enquiry.

Website usage data

Like most websites, we may collect anonymous data about how visitors use our site (pages visited, time on site, browser type) through analytics tools. This data does not identify you personally.

3. How we use your data

We use the personal data we collect for the following purposes:

• To process and fulfil your purchase, and to deliver your document(s)
• To send you order confirmation and customer support communications
• To send you email newsletters or updates, if you have subscribed (you can unsubscribe at any time)
• To respond to enquiries or support requests you send us
• To comply with our legal and regulatory obligations
• To improve our website and products based on aggregate usage data

We will never sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Legal basis for processing

Under UK GDPR, we rely on the following lawful bases for processing your data:

• Contract performance — processing your purchase and delivering your documents
• Legitimate interests — improving our products and responding to enquiries
• Consent — sending marketing emails (you can withdraw consent at any time by clicking unsubscribe)
• Legal obligation — where we are required to retain records for tax or regulatory purposes

5. Third-party processors

We use a small number of carefully selected third-party services to operate DocPilot. Each acts as a data processor on our behalf and is bound by appropriate data processing agreements:

Lemon Squeezy (payment processing & product delivery)

All purchases are made through Lemon Squeezy. They process your payment and handle download delivery. Lemon Squeezy is the Merchant of Record for all sales, meaning they are responsible for collecting payment, handling VAT, and complying with payment card industry standards. See their privacy policy at lemonsqueezy.com/privacy.

ConvertKit (email marketing)

If you subscribe to our email list, your email address is stored by ConvertKit. You can unsubscribe from any email we send by clicking the unsubscribe link at the bottom. See convertkit.com/privacy.

Netlify (website hosting)

Our website is hosted by Netlify. Netlify may process server logs which can include IP addresses. See netlify.com/privacy.

Google Analytics

We use Google Analytics to understand how visitors use our site, but only if you click “Accept analytics” in our cookie banner. Until you accept, the Google Analytics script is not loaded and no analytics data is sent. You can change your choice at any time (see Cookies).

6. How long we keep your data

We retain your data only for as long as necessary for the purposes described above:

• Purchase records — retained for 7 years to comply with HMRC requirements
• Email subscribers — retained until you unsubscribe or request deletion
• Support enquiries — retained for 2 years from the date of the last communication
• Analytics data — aggregated and anonymised; not retained in identifiable form

7. Your rights under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

• Right of access — you can request a copy of the data we hold about you
• Right to rectification — you can ask us to correct inaccurate data
• Right to erasure — you can ask us to delete your data (subject to legal obligations)
• Right to restrict processing — you can ask us to pause processing in certain circumstances
• Right to data portability — you can request your data in a machine-readable format
• Right to object — you can object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please email us at hello@docpilot.to. We will respond within one month.

8. Cookies

Our website uses cookies — small text files stored on your device — for the following purposes:

• Your cookie choice — we remember whether you accepted or rejected optional cookies (stored in your browser as dp_consent) so we don’t ask again on every page.
• Google Analytics (optional) — helps us understand how visitors use our site. The Google Analytics script is only loaded, and its cookies (such as _ga) only set, after you click “Accept” in our cookie banner. If you reject or ignore the banner, it is not loaded.

Two further third-party scripts are also loaded only after you click “Accept”. If you reject, they are not loaded, and our Trustpilot rating is shown as a plain link instead:

• Trustpilot widget (widget.trustpilot.com) — displays our Trustpilot rating and reviews. Trustpilot may process your IP address and browser details to serve the widget. See Trustpilot’s privacy terms.
• Lemon Squeezy affiliate script (lmsqueezy.com/affiliate.js) — used only to credit an affiliate partner when you arrive through their referral link. If you arrive via an affiliate link, it records the referral (which may involve a cookie or browser storage) so that the partner is credited if you buy. It does not track you across other websites. See lemonsqueezy.com/privacy.

Change your cookie settings

You can control cookies through your browser settings. Disabling cookies may affect some website functionality. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when new cookies are set.

9. Security

We take the security of your personal data seriously. Our website is served over HTTPS. Payment processing is handled entirely by Lemon Squeezy, which is PCI DSS compliant. We do not store full payment card details.

Whilst we take all reasonable measures to protect your data, no internet transmission is completely secure. If you have concerns about the security of your data, please contact us immediately.

10. Contact us

For any questions about this privacy policy, to exercise your data rights, or to raise a concern, please contact us:

This policy was last updated in September 2026. We may update it from time to time; the current version will always be available at docpilot.to/privacy.html.