Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, complete a vulnerability assessment, or communicate with us. This includes:

• Name and contact information (email address)
• Venue details (name, capacity, address)
• Compliance data and assessment responses
• Payment information (processed securely by Stripe; we do not store full card details)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Generate your venue's Security Plan and compliance certificates
• Send you technical notices, updates, and mandatory compliance reminders
• Respond to your comments, questions, and customer service requests

3. Data Sharing and Subprocessors

We do not sell your personal data. We may share your information with trusted third-party service providers who assist us in operating our platform (e.g., hosting providers like Vercel, database providers like Turso, payment processors like Stripe, and email providers like Plunk). These providers are contractually obligated to protect your data and only act upon our instructions.

4. Data Security and Retention

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing and against accidental loss. We retain your data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with legal obligations (such as maintaining a legally defensible audit trail for your venue).

5. Your Rights

Under the UK GDPR, you have the right to access, correct, update, or request deletion of your personal data. You may also object to the processing of your data or request data portability. To exercise these rights, please contact us at support@safehall.co.