Legal
Privacy Policy
Last updated: 8 June 2026
The short version
We collect only what the service needs to work. Your premises records are stored securely in your account so they're safe and available on any device, payments are handled by Stripe, and we don't sell your data to anyone.
What we store, and where
- Your account: your email address, used to sign you in (we email you a one-tap sign-in link — there are no passwords) and to contact you about your account or the service.
- Premises records(scope answers, procedures, the staff sign-off register, review dates): stored in our database against your account, so your compliance records are durable and available on any device you sign in from. Staff names and roles you add to the sign-off register are part of these records — only add people's details with their knowledge. You can export all of your records as a file, or delete premises, at any time.
- Payment details: handled entirely by Stripe. We never see or store your card number. We hold the minimal subscription record needed to know your plan is active.
Cookies
We use an essential session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies. Our usage analytics are privacy-friendly and cookieless (see below).
Usage analytics
To understand how the site is used and where we can improve it, we collect privacy-friendly, aggregate analytics — which pages are visited and anonymous events like "a scope check was completed". This never includes your premises content (names, addresses or answers), and it doesn't use tracking cookies.
Processors we use
- Neon — database hosting, where your account and premises records are stored.
- Stripe — payment processing and subscription management.
- Resend — sending sign-in link emails.
- Vercel — website hosting, and privacy-friendly, cookieless web & performance analytics.
Retention & deletion
Your records are kept while your account exists. You can delete individual premises in the app at any time. To delete your whole account and everything in it, email us and we'll action it promptly — deleting your account removes your premises records, procedures and staff register from our database.
Your rights (UK GDPR)
You can access, correct, export or delete your information. You can export your premises records yourself from the app at any time. For anything else — access requests, correction, or full account deletion — contact us and we will action your request.
Contact
Privacy questions or requests: hello@premiseready.co.uk.