Last updated 14 October 2026.
This page explains what this website collects about you, why, who else handles it, how long it is kept, and what you can ask for. It is written to be read, so it is in plain English.
Who we are
This website, theaisearchbook.com, sells the guide “Does AI Show Your Business to Customers?”, written by Diego Herrera. On this page “we” and “us” mean Diego Herrera, who is responsible for your information.
Diego Herrera
c/o Plexo Logic Ltd
71-75 Shelton Street, Covent Garden
London WC2H 9JQ
United Kingdom
hello@theaisearchbook.com
When you buy the guide
- What you give us: your first and last name, your email address, your country and your postcode.
- Why: to take your payment, send you the guide, make your account, and keep the record of the sale that the law requires. Your country also tells us where our buyers are, which matters for tax.
- Your card: you type your card details into a form run by Stripe, our payment provider. They go straight to Stripe and never reach or stay on this website. We see only what Stripe shows a seller, such as the type of card and its last four digits.
- Also kept with your order: the IP address and the browser your order came from, which helps to spot fraud.
- The law’s reason: we need this to carry out our contract with you, and we must keep sales records for tax.
Your account
We make an account for you when you buy, with the email address you used, so you can download the guide again whenever you need it. It holds your name, your email address, your orders and your password. Your password is stored scrambled, so nobody can read it, including us.
Each time you download a file, the date, the time and your IP address are recorded against your order. That lets us help if a download goes wrong, and spot a link that is being shared.
If you followed a link with a code
If you arrived by a link that carries a discount code, the code is remembered so that the right price shows and the code is already filled in at the checkout. If you say yes when the site asks, we also note the first page you landed on and the website you came from, leaving out anything after a “?” in either address, so nothing personal is kept. When you buy, these go on your order. They tell us which places bring buyers.
If someone tries a code that does not exist, we keep a scrambled form of the IP address it came from for ten minutes, to stop people guessing codes.
The question on the thank-you page
After buying, you can tell us in a few words what your business is. It is optional. Your answer is kept with your order and helps us decide which articles and examples to write next.
“Keep me posted”
Only if you tick the box, at the checkout or in your account. We keep your email address, first name and country, the date, and the exact words you agreed to. We use them only for what those words say: emails when the guide is updated, and about new guides. If we use an email service to send them, it receives your email address and first name for that purpose and nothing else.
The law’s reason is your consent, and you can take it back at any time: untick the box in your account, press the unsubscribe link in any of these emails, or email us. After you leave, we keep only a scrambled fingerprint of your address, so that an old order can never put you back on the list.
Reviews
If you leave a review from your account, we keep your rating, your words, your first name, and your business and town if you give them. A review appears on the site only after we have checked it, and only with the details you agreed to show.
Comments on articles
If you comment, we keep your name, email address and comment, and the IP address and browser it came from, which helps to catch spam. Every comment is checked before it appears. Your name and comment are shown; your email address never is.
The article newsletter
The sign-up for new articles by email is run by WordPress.com, part of Automattic. If you sign up, your email address goes to them. They send the confirmation email and the article emails, and look after unsubscribing, under their own privacy policy. It is a separate list from “Keep me posted”.
Counting visits
Only if you say yes when the site asks, we count your visit with Jetpack Stats, run by Automattic. You can change your answer at any time with “Cookie choices” at the foot of every page. Jetpack Stats receives your IP address, details of your browser and device, the page you are on and the page you came from, the time, your browser’s language and your country. We see only totals, such as how many people read a page, never who you are. Automattic keeps the records that hold IP addresses for 28 days. If your browser sends a “Do Not Track” signal, you are not counted.
Logging in
When someone logs in, Jetpack’s login protection, run by Automattic, checks the IP address the attempt came from, to block people guessing passwords.
Who else handles your information
- IONOS, our web host, which also carries our email.
- Stripe, which takes payments (Stripe’s privacy policy).
- Automattic (WordPress.com and Jetpack), for the article newsletter, counting visits and login protection (Automattic’s privacy policy).
Each one handles it only to provide its service to us. Stripe and Automattic are based in the United States, so your information may be handled there; each explains in its own privacy policy how it protects information sent abroad. We never sell your information, and we do not use it for advertising.
How long we keep it
- Orders and the details on them: for as long as HMRC requires sales records to be kept, which is at least five years after the 31 January filing deadline for the tax year of the sale.
- Your account: until you ask us to close it. Your orders are then kept as above.
- “Keep me posted”: until you leave the list.
- Reviews and comments: while they are on the site, or until you ask us to remove them.
- Visit counts: Automattic keeps the records that hold IP addresses for 28 days.
- A wrong code: the scrambled IP address is kept for ten minutes.
Your rights
UK data protection law gives you the right to:
- be told what we do with your information, which is what this page is for,
- get a copy of the information we hold about you,
- have it corrected,
- have it deleted, where we do not need to keep it (sales records, for example, have to be kept for tax),
- ask us to limit how we use it,
- have it given to you in a form you can take elsewhere,
- object to how we use it,
- not be subject to decisions made only by a computer. We do not make any.
To use any of these, email hello@theaisearchbook.com. We will reply within one month.
If you are unhappy with how we handle your information, you can complain to the Information Commissioner’s Office. We would welcome the chance to put it right first. If you live in the European Union, the GDPR gives you the same rights, and you can complain to your own country’s data protection authority.
Cookies
Cookies are small files a website keeps in your browser. This site uses these:
- bk_code: the discount code from the link you followed, so the right price shows and the code is filled in at the checkout. Set only if you follow such a link. Lasts 30 days.
- bk_landing and bk_ref: the first page you landed on and the website you came from, as described above. Set only if you follow a link with a code, and only if you say yes when the site asks. Last 30 days.
- woocommerce_items_in_cart, woocommerce_cart_hash and wp_woocommerce_session_: keep the guide in your basket while you buy. The first two last until you close your browser, the third for two days.
- __stripe_mid and __stripe_sid: set by Stripe on the checkout page, to prevent fraud. They last a year and 30 minutes.
- wordpress_logged_in_, wordpress_sec_ and wordpress_test_cookie: keep you logged in to your account. They last until you log out or close your browser, or for 14 days if you tick “Remember me”.
- bk_consent: your answer to the question about counting visits, so you are not asked on every page. Lasts six months.
- comment_author_: your name and email address for the comment form, only if you tick the box to save them. Lasts just under a year.
Jetpack Stats, described above, does not set a cookie in your browser. If your browser sends the Global Privacy Control signal, the site takes it as a no and does not ask.
Changes to this page
If we change how we use your information, we will update this page and the date at the top. See also the Terms and Conditions and the Contact page.