Privacy Policy

1. How to contact us

If you have any question about this policy or about how we handle your data, contact us through our contact page.

2. Information we collect

Information you give us

When you create an account, start a trial, subscribe to a paid plan or sign up to our newsletter, we collect your name, email address and billing details. If you contact us, we keep a record of that correspondence.

Payments are handled by our payment processor. We never see or store your full card number.

Information we collect automatically

When you use the Platform we collect limited technical information, including your IP address, browser and device type, and the pages you visit. We use this to keep the Platform secure, to make sure it works properly, and to understand in aggregate how it is used.

Information we do not collect

We do not collect special category data, we do not build advertising profiles, and we do not track you across other websites.

3. How we use your information, and our lawful basis

Under UK data protection law we must have a lawful basis for each use of your personal information. Ours are as follows:

• Providing your account and subscription, including giving you access to the Platform, managing your plan and taking payment. Lawful basis: performance of a contract with you.
• Service and transactional emails, such as receipts, renewal and trial notices, billing problems, security alerts and material changes to our terms. Lawful basis: performance of a contract, and legal obligation where we are required to notify you.
• Sending our newsletter and market analysis. Lawful basis: your consent, or our legitimate interests in marketing similar services to existing customers, where you have not opted out.
• Support and responding to your enquiries. Lawful basis: legitimate interests in running our business and helping our users.
• Keeping the Platform secure and preventing fraud or abuse, including detecting shared or automated access. Lawful basis: legitimate interests in protecting our business and our subscribers.
• Understanding how the Platform is used, in aggregate, so we can improve it. Lawful basis: legitimate interests in improving our service.
• Meeting our accounting, tax and other legal obligations. Lawful basis: legal obligation.

Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights, and we have concluded they are not. You can object to this processing at any time, as set out in section 8.

4. Marketing and how to opt out

You can stop receiving our newsletter and any marketing email at any time by clicking the unsubscribe link at the bottom of any such email, or by changing your preferences in your account. We will action this promptly.

Opting out of marketing does not stop service and transactional emails, which we need to send you while you hold an account or a subscription.

5. Who we share your information with

We do not sell, rent or trade your personal information.

We share it only with service providers who help us run the business, and only so far as they need it. They act on our instructions under a written contract and may not use your data for their own purposes. These include:

• Our subscription, account and email platform, which manages accounts, billing records and email delivery.
• Our payment processor, which handles card payments and holds your card details on our behalf.
• Our website and application hosting providers.
• Our privacy-focused analytics provider, which measures aggregate site usage without cookies.
• Our accountants and professional advisers, where necessary.

We may also disclose information where we are required to do so by law, by a regulator, or by a court, or where necessary to establish, exercise or defend legal claims.

6. International transfers

Some of our service providers are based outside the United Kingdom, including in the United States and the European Economic Area. This means your personal information may be transferred to, stored in, or accessed from those countries.

Where we transfer personal information outside the UK, we make sure an appropriate safeguard is in place. Depending on the provider, we rely on:

• a UK adequacy decision, where the country or certification scheme has been approved by the UK Government, including the UK Extension to the EU-US Data Privacy Framework; or
• the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment.

You can ask us for more detail about the safeguards that apply to a particular transfer.

7. How long we keep your information

• Account information: for as long as your account is open, and for up to 24 months after it is closed, so that you can return without losing your history and so we can deal with any query or dispute.
• Billing and transaction records: for 6 years from the end of the relevant financial year, because we are required to keep them for accounting and tax purposes.
• Marketing preferences and consent records: until you withdraw consent, and for a reasonable period afterwards so we can evidence that you opted out.
• Support correspondence: for up to 24 months after your query is resolved.
• Aggregate analytics: retained in a form that does not identify you.

Where we no longer need your information, we delete it or anonymise it.

8. Cookies and analytics

We keep this deliberately minimal.

We use strictly necessary cookies only. These are set by our subscription platform so that you can sign in and stay signed in to the members' area. They are essential to providing a service you have asked for, and cannot be switched off without breaking that functionality.

For site measurement we use a privacy-focused analytics provider that does not use cookies, does not collect personal information, does not fingerprint your device and does not track you across other websites. Statistics are aggregated and cannot be used to identify you.

We do not use advertising, retargeting or cross-site tracking cookies. That is why you are not asked to accept a cookie banner on this site.

You can block or delete cookies in your browser settings, but if you block essential cookies you will not be able to sign in.

9. Your rights

Under UK data protection law you have the right to:

• Be informed about how we use your data, which is the purpose of this policy.
• Access the personal information we hold about you.
• Rectification, to have inaccurate information corrected.
• Erasure, to have your information deleted in certain circumstances.
• Restriction, to limit how we use your information in certain circumstances.
• Data portability, to receive the information you gave us in a portable format.
• Object to processing based on our legitimate interests, and to object to direct marketing at any time.
• Withdraw consent at any time, where we rely on consent. This does not affect anything we did before you withdrew it.

To exercise any of these rights, contact us through our contact page. We will respond within one month. Exercising your rights is free, and we will not treat you differently for doing so.

If you are outside the United Kingdom, you may have equivalent or additional rights under your own local data protection law, and this policy does not restrict them.

10. Automated decision-making

We do not make decisions about you that produce legal or similarly significant effects using automated processing alone, and we do not carry out profiling of that kind.

11. How to complain

If you are unhappy with how we have handled your personal information, please tell us first so we can put it right.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113. If you are based elsewhere, you may complain to your own national data protection authority.

12. Security

We use appropriate technical and organisational measures to protect your personal information, including encryption in transit, access controls, and choosing reputable providers who maintain recognised security standards.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach occurs that is likely to result in a high risk to your rights, we will notify you and the Information Commissioner's Office as required by law.

13. Children

The Platform is not intended for anyone under the age of 18 and we do not knowingly collect information from children. If you believe a child has given us their personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and change the date below. Where a change is material, we will tell you by email.