Third-Party Processors: We utilize payment gateways and cloud infrastructure providers who act as data processors under strict contractual obligations. All processors maintain PCI-DSS compliance and are located in jurisdictions with adequate data protection laws.
Retention Periods: Active account data is retained for the duration of your subscription plus a 12-month grace period. Analytics data is anonymized after 24 months. Transaction records are kept for 7 years to comply with UK financial regulations.
Cookie Technology: Essential session cookies enable core functionality. Analytics cookies, which can be disabled via our Cookie Policy, help us understand feature usage. No advertising cookies are deployed.
International Transfers: Data may be transferred to our development team in the UK and service providers in the EU/EEA. Standard Contractual Clauses and Transfer Impact Assessments ensure protection equivalent to UK GDPR standards.