Privacy Policy

Last updated: May 2026

1. Who We Are

This portal provides account, billing, support, and related application services. We are the data controller for the personal data we collect.

2. What Data We Collect

• Account data: Name, email address, company name, VAT number (if provided)
• Payment data: Handled by Stripe. We do not store card numbers.
• Technical data: IP address, browser type, session cookies
• Outbound-link events: when you use a brochure merchant link, a keyed hash of the client IP, truncated browser/referrer details, selected country, and whether a fallback destination was used
• Service data: Plan selection, support enquiries, and account preferences

3. Lawful Basis

We process your data under:

• Contract: To provide the services you subscribe to
• Legitimate interest: Security, fraud prevention, service improvement
• Consent: Marketing communications (where applicable)

4. Data Processors

We use the following processors:

• Stripe: Payment processing
• Hosting provider: Server infrastructure

5. Data Retention

• Active accounts: retained for the duration of service plus 7 years (tax/accounting)
• Enquiries: 2 years
• Security logs: 1 year
• Email logs: 1 year

6. Your Rights

Under UK GDPR you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure (right to be forgotten)
• Restrict processing
• Data portability
• Object to processing

To exercise these rights, contact us at support@example.com.

7. Cookies

We use essential cookies for session management and may use functional cookies for partner referrals and an optional outbound-link storefront-country choice. See the Cookie Policy for the current list. Outbound merchant links and their click records are separate from inbound partner referrals.

8. Contact

For privacy questions or to make a complaint, contact us at support@example.com.

This policy is a template and should be reviewed by a legal professional before going live.