Legal
Privacy Policy
Last updated: 3 August 2026
This Privacy Policy explains how Deploy & Enjoy ("we", "us", "our") collects, uses and protects your personal data when you use deployenjoy.com, our client portal at app.deployenjoy.com, and our services. We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.
1. The data we collect
| Category | Examples | Why |
|---|---|---|
| Account data | Name, email, password (hashed), role | To create and secure your portal account |
| Project data | Briefs, files, messages, questionnaire answers, meeting notes | To deliver your project |
| Order & billing data | Purchases, amounts, invoices, delivery/shipping details | To process orders and comply with tax law |
| Payment data | Handled by Stripe — we never see or store full card details | To take payment securely |
| Technical data | IP address, browser/device, cookies, usage | Security, performance and site operation |
| Communications | Emails and messages you send us | To respond and support you |
2. How we use your data & our legal basis
- To provide our services and portal — legal basis: performance of a contract.
- To process orders, downloads and shipping — performance of a contract.
- To send service emails (account, password reset, order confirmation, download links, project updates) — performance of a contract.
- To keep the site and accounts secure and prevent fraud — legitimate interests / legal obligation.
- To meet legal and tax obligations — legal obligation.
- Analytics and improvement — legitimate interests, or consent where cookies require it (see our Cookie Policy).
- Marketing — only with your consent; you can opt out at any time.
3. Who we share it with (processors)
We only share data with trusted providers who process it on our behalf under contract:
- Stripe — payment processing.
- Supabase — database and authentication hosting.
- Cloudflare — website hosting, delivery and security.
- Email provider — sending transactional emails.
We do not sell your personal data. We may disclose data where required by law.
4. International transfers
Some providers may process data outside the UK/EEA. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or Standard Contractual Clauses.
5. How long we keep it
We keep personal data only as long as necessary: account and project data for the life of your relationship with us and a reasonable period afterwards; order and invoice records for at least 6 years to meet UK tax law; and security logs for a short period. You can ask us to delete your account at any time.
6. Your rights
Under UK GDPR you have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and to withdraw consent. To exercise any right, email info@deployenjoy.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
7. Security
We use encryption in transit (HTTPS), hashed passwords, access controls and reputable infrastructure. No system is perfectly secure, but we take reasonable steps to protect your data and will notify you and the ICO of any breach where legally required.
8. Children
Our services are not directed at children under 16 and we do not knowingly collect their data.
9. Changes
We may update this policy; the "last updated" date shows the latest version. Significant changes will be notified where appropriate.