Privacy Policy

Gradlines Ltd is the controller of your personal data. We are registered in England and Wales under company number 17290685, with our registered office at 4a Marford Road, Wheathampstead, St. Albans, England, AL4 8AS.

For any questions about this policy or how we handle your personal data, contact us at gradlinesuk@gmail.com.

Account and contact data — your email address, provided when you subscribe.

Payment data — information necessary to process your payments. Your card details are collected and processed directly by Stripe. We do not see or store your full card number. We receive limited information from Stripe such as payment confirmation, subscription status, and the last four digits of your card.

Subscription data — records relating to your subscription, including its start date, status, billing history, your acceptance of our Terms, and the date of acceptance.

Communications data — any correspondence you send to us.

We do not use cookies for tracking or advertising and we do not use third-party analytics or marketing tracking tools. If this changes in the future, we will update this policy and where required ask for your consent before placing any non-essential cookies.

We collect personal data directly from you when you subscribe, when you make a payment, and when you contact us. We receive payment-related information from Stripe when you pay for or renew your subscription.

We use your data to create and manage your account, deliver briefings to you by email, take payment and manage your subscription, respond to your enquiries, send essential service messages, comply with our legal and accounting obligations, and detect and prevent fraud. Our legal bases are performance of our contract with you, compliance with legal obligations, and our legitimate interests in operating the Service securely.

We send only essential, service-related emails as part of your subscription. We do not send marketing emails unless you have separately agreed to receive them.

Stripe — our payment processor, which processes payment data to take and manage your subscription payments.

Resend — our email delivery provider, which processes your email address to deliver briefings and service emails to you.

Professional advisers and authorities — where required by law or to protect our legal rights.

We do not sell your personal data to anyone, and we do not share it with third parties for their own marketing purposes.

Some of our service providers, including Stripe and Resend, may process personal data outside the United Kingdom. Where this occurs, we take steps to ensure it is protected by an adequate level of protection through adequacy regulations or appropriate safeguards such as Standard Contractual Clauses.

We keep your account and subscription data for the duration of your subscription. After your subscription ends, we retain certain data where required by law — payment and transaction records are generally kept for at least six years in line with UK tax and accounting requirements. When we no longer need your personal data, we delete or anonymise it securely.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. Payment data is handled by Stripe using industry-standard security. No method of transmission or storage is completely secure, but we work to protect your data using appropriate safeguards.

Under UK data protection law, you have the right to be informed about how we use your data; to access a copy of the data we hold about you; to rectification of inaccurate data; to erasure in certain circumstances; to restrict processing in certain circumstances; to data portability; to object to processing based on our legitimate interests; and to withdraw consent where our processing is based on consent.

To exercise any of these rights, contact us at gradlinesuk@gmail.com. We will respond within one month. We will not charge you for exercising your rights in most cases.

If you are unhappy with how we have handled your personal data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

The Service is available to subscribers aged 16 or over. We do not knowingly collect personal data from anyone under 16. If we become aware that we have done so, we will delete it.

We may update this Privacy Policy from time to time. When we make changes, we will update the date at the top of this policy, and where the changes are significant we will notify you by email or by posting a notice on our website.