Privacy Policy

Last updated: 9 November 2026

We're a small family business, and we treat your information the way we'd want ours treated: we only ask for what we need, we keep it safe, and we never sell it.

Who we are

Little Learners Toolbox is run by Hayley Taylor, an Individual Entrepreneur registered in Georgia (identification number 300489870), at Apartment 58, Floor 10, Entrance 1, 16 Niko Ketskhoveli Street, Gldani District, Tbilisi, Georgia. She decides how your information is used and is responsible for it. If you have any question about your information, email us at info@littlelearnerstoolbox.com. Our Terms of Sale and Refund Policy explain how buying from us works.

What we collect, and why

  • Free pack signup: your first name and email address, so we can email you the free pack you asked for. Getting the pack doesn't sign you up for anything else.
  • Our email list (optional): if you tick the box to get shop news, new resources and ideas, or sign up at checkout, we first send one email asking you to confirm. Only after you confirm do we send you our news. You can unsubscribe any time.
  • Get in touch form: your name, email address and message, so we can read it and reply to you.
  • Your basket: the items you add are saved in your own browser on your device, so they're still there when you come back. We don't receive this list.
  • When you buy something: your name, email address and billing address (country, state or province where needed, town, postcode, first address line), what you bought and what you paid. We need these to deliver your downloads, send your receipt and invoice, and keep the records tax law asks of us.
  • Where you're shopping from: your IP address and the country it belongs to, together with your billing country. Tax rules for digital products depend on where the buyer lives, so we have to keep two pieces of evidence of your location. If they don't match, the checkout can't continue.
  • Your agreements at checkout: which version of our Terms you agreed to, the exact wording of the box you ticked about getting your download straight away, and when. This is our record that you agreed.
  • Your downloads: when each file was downloaded and from which IP address and browser, so we can stop misuse of download links and help if something goes wrong.
  • Payment: you pay on Bank of Georgia's own secure payment page. We never see or store your card number. The bank tells us whether the payment worked, the card type and a masked card number (like 4111 •••• 1111).
  • Bot check: the checkout uses Cloudflare Turnstile to check you're a person and not an automated script.
  • Basic technical information: like any website, our hosting provider automatically processes things like your IP address and browser type to deliver the pages and keep the site secure.

Counting visits: we use Vercel Web Analytics to see, in total, how many people visit, which pages they look at, which country they visit from, and which products are added to a basket. It doesn't use cookies and doesn't follow you to other websites. We only see totals: no names, email addresses or order details are sent to it, and it doesn't give us a way to recognise you.

We don't use advertising or tracking cookies.

Our legal reasons

  • Sending the free pack: because you asked us to, to provide what you requested.
  • Our email list: your consent, which you can take back at any time by unsubscribing.
  • Replying to your messages: because you asked us to, and our legitimate interest in helping you.
  • Orders and downloads: we need it to carry out our contract with you.
  • Tax and accounting records: the law requires it.
  • Keeping the website and checkout safe (bot checks, stopping misuse of download links): our legitimate interest in preventing fraud.

Who helps us

We use a few trusted services to run the website. They process your information on our behalf, only to provide their service to us. Bank of Georgia also handles payment information under its own privacy rules.

  • Klaviyo (USA): sends our emails and keeps our mailing list.
  • Web3Forms: delivers messages from our Get in touch form to our inbox.
  • Google (Gmail): our email inbox, where your messages and our replies are kept.
  • Vercel (USA): hosts this website and counts visits anonymously.
  • Bank of Georgia (Georgia): takes your payment on its secure page and handles refunds.
  • Neon (servers in Frankfurt, Germany): the database where your order is stored.
  • Cloudflare (USA): stores the files you buy and runs the bot check at checkout.
  • Resend (USA): sends your receipt and download-link emails.
  • Google Fonts: shows the fonts on this website, which means your browser connects to Google.

Some of these services process information outside the country where you live, including in the United States. Where the law asks for it, these transfers are covered by recognised safeguards, such as an adequacy decision or Standard Contractual Clauses in the service's data processing terms. Email us if you'd like to know more about the safeguards for your information.

We never sell or rent your personal information.

How long we keep it

  • Free pack requests: your name and email address, plus a note that you asked for the pack, for up to 2 years, so we can resend it if you ask. Then we delete them, unless you've joined our email list.
  • Mailing list: until you unsubscribe. After that we only keep a note that you unsubscribed, so we don't email you again.
  • Messages: as long as we need to help you, and no longer than 2 years.
  • Orders, invoices and refunds: as long as the tax and accounting laws that apply to our business require, counted from the end of the tax year of your purchase. That means 10 years for EU orders covered by the EU One Stop Shop VAT rules, and 6 years for UK orders under the standard UK VAT rules. For all other orders, our policy is to keep them for 7 years, or longer if a law that applies to us requires it. After that we delete them or remove anything that identifies you, unless another legal reason means we must keep them. We keep sales totals per country or state, which can't identify you.
  • Your IP address on an order: we normally keep it for 18 months for security and fraud prevention, then delete it. We keep the country it showed where we need it for tax records. For orders covered by EU or UK VAT record-keeping rules, we keep the information and evidence we used to decide where you live for the required period, which can include your IP address if it was part of that evidence.
  • Download records: together with the order.
  • Your basket: stays in your browser until you clear it or your browser data.

Your choices and rights

Depending on the law that applies to you, you can ask to see the information we hold about you, correct it, delete it, limit or object to how we use it, and get a copy of it. Every email we send has an unsubscribe link at the bottom. Just email info@littlelearnerstoolbox.com and we'll help, usually within a few days and always within one month.

Some information we have to keep, for example order and invoice records for the time tax law requires (see above). If we can't do everything you ask, we'll explain why.

If you're not happy with how we've handled your information, please tell us first so we can put it right. You can also contact the data protection authority in your country, or the State Audit Office of Georgia, which supervises personal data protection in Georgia.

Children

Our resources are made for little learners, but this website, our emails and our shop are for the grown-ups who guide them: parents, carers and educators. We don't knowingly collect information from children. If you think a child has sent us their details, let us know and we'll delete them. Some short technical logs kept by our service providers may stay for a little while before they're deleted automatically.

Changes to this policy

If anything changes, for example when we move to a new hosting provider or start selling in new countries, we'll update this page and the date at the top.