Privacy Policy

Last updated: 22 October 2026

This policy explains how Seralyn (“we”, “us”, “our”) collects, uses and protects your personal data when you visit this website, buy from one of our stores, subscribe to our updates, or otherwise interact with us. We handle personal data in line with the UK GDPR and the Data Protection Act 2018.

1. Who we are

Seralyn is an independent studio based in the United Kingdom that operates several product lines, including Agent Workflows (digital toolkits, sold via Gumroad) and BrightNest (consumer gadgets, sold via Shopify). For the purposes of UK data protection law, Seralyn is the data controller for the personal data described here.

Contact for privacy matters: privacy@seralyn.co.uk

2. The data we collect

Information you give us

Information collected automatically

We do not collect payment card numbers. Card payments are processed directly by our payment providers; we only receive confirmation of a completed order.

3. How we use your data, and our legal basis

PurposeLegal basis (UK GDPR)
Process and deliver your orders, and provide supportPerformance of a contract
Send order and delivery updatesPerformance of a contract
Send newsletters and marketing (only if you opt in)Consent — you can withdraw at any time
Keep our sites secure and improve our productsLegitimate interests
Meet tax, accounting and other legal dutiesLegal obligation

4. Who we share it with

We never sell your personal data. We share it only with the service providers (processors) needed to run our business, under appropriate agreements:

ProviderPurpose
ShopifyHosting the BrightNest store and processing orders
GumroadSelling and delivering Agent Workflows digital products
Payment providers (e.g. Shopify Payments, Stripe, PayPal)Securely processing payments
CJdropshippingFulfilment and shipping of physical orders
Our email/newsletter systemSending updates you’ve opted in to
Social & analytics platformsOnly where you choose to interact with us there

We may also disclose data where required by law, or to protect our rights, property or safety.

5. International transfers

Some of our providers are based outside the UK/EEA (for example in the United States). Where personal data is transferred internationally, we rely on appropriate safeguards — such as UK-approved standard contractual clauses or an adequacy decision — so your data stays protected.

6. Cookies

Our websites and stores use cookies that are essential for them to function (for example, remembering your basket), and may use analytics cookies to understand how the sites are used. You can control or block cookies in your browser settings; blocking essential cookies may stop parts of a site from working.

7. How long we keep it

We keep personal data only as long as necessary for the purposes above — for example, order records are kept for as long as required by UK tax and accounting law, and newsletter data until you unsubscribe.

8. Your rights

Under UK GDPR you have the right to: access your data; have it corrected or erased; restrict or object to its use; data portability; and, where we rely on consent, to withdraw that consent at any time. To exercise any of these, email privacy@seralyn.co.uk.

You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ICO), at ico.org.uk.

9. Children

Our products and sites are intended for adults. We do not knowingly collect personal data from children under 16.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be posted on this page with its “last updated” date.

11. Contact

For any question about this policy or your personal data, contact privacy@seralyn.co.uk.

Seralyn is an independent UK studio. This policy covers the Seralyn website and our Agent Workflows and BrightNest product lines. Where you buy or interact through a third-party platform (Shopify, Gumroad, Amazon or a social network), that platform’s own privacy policy also applies to data it collects directly.