Privacy notice (draft for review)

Who is responsible

Worth Starting is run by POLICYANDPLAY LTD, a company registered in England and Wales, company number 17253846. We are registered with the Information Commissioner's Office (ICO). You can email us at hello@policyandplay.co.uk.

What we collect

• Your email address, for the newsletter and for your account.
• Payment details, which are handled by Stripe. We never see your card numbers.
• Records of what you buy and any subscription you hold.
• The setup progress you save in your account.
• Clicks on partner links. These are anonymous unless you are signed in.

Why we hold it and our lawful basis

• Contract: to run your account and provide what you buy.
• Consent: to send the newsletter and to set cookies beyond the essential ones. You can withdraw your consent at any time.
• Legitimate interest: to keep the site secure and to prevent fraud.

Who helps us

We use trusted providers to run the service. They only handle your information on our instructions. They are:

• Stripe (payments).
• Supabase (database).
• Netlify (hosting).
• Cloudflare (DNS and email forwarding).
• Our email sending provider.

How long we keep it

• Account data is kept while your account is open, plus 6 years for financial records.
• Newsletter details are kept until you unsubscribe.

Your rights

You have the right to access your information, to have it corrected, to have it deleted, to object to how we use it, and to move it to another provider (portability). To use any of these rights, email us at hello@policyandplay.co.uk.

If you are unhappy with how we handle your information, you can complain to the ICO at ico.org.uk.

Cookies

We use essential cookies only by default. We use analytics cookies only after you accept them.

We do not sell your data

We do not sell your personal information.