SUPRTD
Privacy Policy
This policy explains what personal information SUPRTD collects, why, who it is shared with, and what rights you have over it.
ALMOST FINAL — this policy now describes the systems actually in use. What remains is the business's own identity and its ICO registration number, which is a legal requirement for handling personal data and must be obtained before this is published. 3 bracketed values still need answering, and every one is a fact only you can supply.
-
01 Who we are
SUPRTD is a trading name of [TRADER NAME], a sole trader whose business address is [BUSINESS ADDRESS], and who is the data controller for the information described here. Our registration with the Information Commissioner’s Office is [ICO REGISTRATION NUMBER].
For anything about your personal information, contact hello@suprtd.com. We are not required to appoint a Data Protection Officer and have not appointed one; requests are handled by the owner of the business.
-
02 Who this applies to
This policy covers members, people who sign up for a free membership, people who contact us, and visitors to this website. It does not cover the specialists we introduce you to, who are separate controllers of any information you give them directly.
-
03 What we collect when you join
When you join we collect your name, email address and, if you give it, your mobile number. For paid memberships we also collect the information needed to take payment.
-
04 Payment information
Payments are processed by Stripe, which acts as a separate controller for the payment data it handles. We receive confirmation of payment and limited details such as the last four digits of the card. We do not store full card numbers.
-
05 What you tell the concierge
To find the right specialist, the concierge will often need to understand your circumstances. Depending on the question, that may include information about your business, your income, your contracts, your tax position, your property or your household.
Some of this may be sensitive. Share only what is needed for the question you are asking. We do not ask for special category information such as health, and you should not send it. If you do share something of that kind in passing, we rely on your explicit consent to hold it for as long as the request is live, and we delete it once the matter is closed.
-
06 WhatsApp and other messages
Requests come in over WhatsApp. Messages are transmitted through WhatsApp under its own terms and privacy policy, which we do not control.
We keep a record of correspondence with your concierge so that the relationship has continuity and we are not asking you the same things twice. WhatsApp messages remain in WhatsApp, on the phone used by your concierge. Notes we take from them are kept in our own files in Google Workspace, for as long as you are a member and for 2 years afterwards.
-
07 Partner introductions
When we introduce you to a specialist we share what that specialist needs in order to help — usually your name, contact details and a summary of the situation. We tell you what is being shared before the introduction is made.
From the point of introduction, the specialist is an independent controller of the information you give them.
-
08 Why we use your information
To provide the membership, run the concierge service, make and follow up introductions, take payment, keep our records, improve the service, meet our legal obligations, and — where you have agreed — send you marketing.
-
09 Our lawful bases
We rely on performance of a contract to provide the membership and take payment; legitimate interests to run, secure and improve the service and to keep records of the relationship; legal obligation for accounting and tax records; and consent for marketing and for anything you explicitly opt into.
Where we rely on legitimate interests, we have considered the effect on you and concluded that running and improving a service you have chosen to use does not override your rights. You may object at any time, and we will stop unless we have compelling grounds not to.
-
10 Marketing
We will send you messages about your membership because they are part of the service. Marketing is separate: we send it only where you have agreed, and every marketing message carries a way to stop.
-
11 Who we share information with
Specialists we introduce you to, with your knowledge. Suppliers who process information on our behalf — hosting, payment, messaging, email, analytics and support tools. Professional advisers. Authorities where the law requires it. The suppliers we currently use are Google (email, documents and the record of signups), Stripe (payments), Vercel (website hosting and cookieless visitor counts), WhatsApp, owned by Meta (concierge messaging), and Mailchimp (marketing email, where you have agreed to receive it).
We do not sell personal information.
-
12 International transfers
Some of our suppliers process information outside the UK. Where that happens we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum. Google, Stripe, Vercel, Meta and Mailchimp are all United States companies that may process information there. For each of them we rely on the UK Extension to the EU-US Data Privacy Framework where they are certified under it, and otherwise on the Addendum to the European Commission standard contractual clauses.
-
13 How long we keep it
We keep membership records for as long as you are a member and for 2 years afterwards. Financial records are kept for 6 years to meet accounting and tax obligations. Correspondence with the concierge is kept for the same 2 years, because a support relationship depends on knowing what was asked before.
-
14 Keeping it secure
Information is held in Google Workspace and Stripe, both protected by two-factor authentication. The website sends signups over an encrypted connection to a private record that only the business owner can read. Access is limited to people who need it, which at present means the owner alone.
If personal information is lost or exposed in a way that puts you at risk, we will tell the Information Commissioner within 72 hours of becoming aware of it, and we will tell you without undue delay where the risk to you is high.
-
15 Your rights
You have the right to access your information, to have it corrected, to have it deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent where we rely on it. Exercising these rights is free and we will respond within one month.
To make a request, contact hello@suprtd.com.
-
16 Complaints
If you are unhappy with how we have handled your information, tell us first at hello@suprtd.com. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
-
17 Cookies
This website sets no cookies. There is nothing to consent to and no banner to dismiss.
We do measure how many people visit and which pages they read, using Vercel Web Analytics. It is cookieless: it stores nothing on your device, does not identify you, and does not follow you to other websites. It tells us that a page was read, not who read it.
If we ever adopt something that does use cookies or track individuals, we will ask your permission first.
-
18 Automated decisions
We do not make decisions about you by automated means without human involvement, and we do not profile you in a way that produces legal or similarly significant effects. Your concierge is a person, and the decision about which specialist suits your situation is made by a person.
-
19 Changes to this policy
We may update this policy. Where a change is material we will tell you. This version is dated 20 August 2026.