Ringmark Privacy Policy (Draft for review)

Status: draft for owner review. This document is not the accepted legal decision record. It describes the controls that must be verified in production before public payment activation.

Last updated: [date of owner acceptance or solicitor sign-off]

1. Who we are

Ringmark is a trading name of Grow Online Digital Ltd, company number 14310212, registered office 167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF. We are the data controller for the personal data described below. Contact us at hello@ringmark.co.uk.

2. What we collect

Email address, when you sign up for the free Local Price Gap Index or purchase a dossier. Name and billing details you enter at checkout, collected and processed on our behalf by Stripe. We never see or store your full card number. Basic usage data, such as which pages you view and which outcode pages you visit, collected through PostHog only after you accept analytics cookies. Technical data such as IP address and browser type, collected automatically for security and fraud prevention.

We do not collect or infer any special category data about you, and the dossier itself does not require or use any personal data about you beyond your email address and purchase record.

3. Why we collect it, and our legal basis

To create and deliver a dossier you have purchased: necessary to perform our contract with you. To send the free Index by email: based on your consent, which you can withdraw at any time by unsubscribing. To keep the service secure and understand aggregate usage: our legitimate interest in running and improving Ringmark, balanced against your privacy.

4. How long we keep it

We delete an unconfirmed Index email address after 30 days. We delete a confirmed Index email address after 24 months without a qualifying contact. We delete a delivered dossier PDF 30 days after delivery. We retain purchase and payment records until six years after the end of the relevant financial year. We delete backup copies within 30 days under the provider backup policy. If you ask us to delete personal data, we verify your identity and complete the request within 30 days unless we must keep a record for law, tax, accounting, or fraud prevention.

5. Who we share it with

Stripe, to process payment. Resend, to send transactional and marketing email. PostHog, for privacy-respecting product analytics. Cloudflare R2, to store dossier files. Each of these providers acts as a processor on our instructions and is contractually required to protect your data. Where a provider processes data outside the UK or EEA, that transfer is covered by that provider's standard contractual clauses or equivalent safeguard.

6. Your rights

Under UK GDPR you have the right to ask for a copy of the personal data we hold about you, to have inaccurate data corrected, to ask us to delete it, to object to or restrict certain processing, and to complain to the Information Commissioner's Office if you believe we have not handled your data properly. Use the privacy request form below or contact us at hello@ringmark.co.uk to exercise these rights.

7. Cookies

We use essential cookies to run the site. We do not set PostHog analytics cookies until you choose to accept them. You can accept or reject analytics cookies with the cookie settings control. You can change that choice at any time.

8. Changes to this policy

We may update this policy from time to time and will post the current version on this page.