Skip to main content

Security and data

A plain summary of how we handle data. It is not a certification and we do not claim any security certifications on this page.

Payments

Card payments are handled by Stripe. Card numbers never reach our systems and we never store them.

Personal data

  • Our privacy notice is linked below, and so are our customer terms. While the terms are being finalised that page says so, and you see them in full before you place any order.
  • What you send us through the contact form is used to reply to you. We do not add you to a mailing list.
  • People can ask for a copy of their data or ask us to delete it, using the privacy request form.
  • When a customer leaves we export their data to them and later delete it.

Access and records

  • Our own staff tools run separately and cannot be reached from this website.
  • Changes made by our team are recorded in an audit log.
  • Customer links, such as the onboarding form and the portal sign-in, use long random tokens.