Privacy Policy

This Privacy Policy explains how [Company Name] ("we", "us", or "our") collects, uses, and shares information when you use the Soleify CMS application ("Service"). We are the controller for the personal data we process. If you have questions, contact us at [Support Email].

1. Information We Collect

We collect information you provide directly, including account details (name, email, password), organisation details, and any data you enter into the Service such as customer contact details, quotes, jobs, and invoices.

We also collect information about your use of the Service, such as basic logs and timestamps, and security-related data. We use Google reCAPTCHA to help prevent abuse, which may collect device and usage data as described in Google's policies.

Payment details are processed by Stripe. We do not store full payment card details.

2. How We Use Information

We use information to provide and improve the Service, process payments, send transactional emails, prevent abuse, provide customer support, and comply with legal obligations.

3. Legal Bases (UK GDPR)

Our legal bases for processing include performance of a contract, legitimate interests (such as security and service improvements), and consent where required. We also process some data to comply with legal obligations.

4. Sharing and Disclosure

We may share information with service providers that help us operate the Service, including:

- Hosting and infrastructure providers (for example, DigitalOcean).
- Payment processors (Stripe).
- Email delivery providers.
- Google reCAPTCHA for abuse prevention.

We may also disclose information if required by law, to protect our rights, or in connection with a business transfer.

5. Data Retention

We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data, subject to legal requirements.

6. Security

We use reasonable administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is 100% secure.

7. International Transfers

Your information may be transferred to and processed in countries outside the UK. Where required, we use appropriate safeguards for such transfers, such as the UK International Data Transfer Agreement or other approved mechanisms.

8. Your Rights

You have the following rights in relation to your personal data:

- Right of access (request a copy of your personal data).
- Right to rectification (correct inaccurate or incomplete data).
- Right to erasure (request deletion of your personal data in certain circumstances).
- Right to restrict processing (pause our use of your data in certain circumstances).
- Right to data portability (receive your data in a structured, commonly used format).
- Right to object (object to processing based on legitimate interests).
- Rights relating to automated decision-making and profiling (we do not use these for core services).

To exercise these rights, contact us at [Support Email]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO). We encourage you to contact us first so we can address your concerns.

9. Children's Privacy

The Service is not intended for children under 16, and we do not knowingly collect information from children.

10. Cookie Policy

We use cookies and similar technologies to provide the Service, keep you signed in, and protect against abuse. These include essential cookies (for example, authentication and security) and functional cookies that remember preferences. We may also use reCAPTCHA cookies provided by Google.

You can control cookies through your browser settings. If you block cookies, some parts of the Service may not work as intended.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy and update the effective date.

12. Contact Us

If you have questions about this Privacy Policy, contact us at [Support Email] or [Company Address].