Privacy & Cookie Policy

1. Who we are

This platform and its tools are provided by David Bradley-Bowles, trading as Fabric First Assurance, a sole practitioner based in the United Kingdom. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), David Bradley-Bowles is the data controller responsible for your personal data and for the governance of this policy.

Contact for any privacy matter, including to exercise your rights:
Email: david@bradley-bowles.co.uk
Telephone: 07943 274053

2. The data we collect

When you request access and use the tools, we collect:

• Your name and the practice or organisation you work for.
• Your work email address and telephone number.
• The information you enter into and save within the tools (for example scheme details and calculation inputs and outputs).
• Technical and usage data needed to run a secure logged-in service, such as your IP address and the sign-in session held in your browser.

3. Why we use it, and our lawful basis

• To provide the service — creating your account, signing you in, and storing your saved work so it is there next time. Lawful basis: performance of a contract / our legitimate interest in running the platform.
• To contact you about this work — responding to you and following up about the performance gap, the tools, and related services. Lawful basis: your consent, given when you tick the box on the access form, and our legitimate interest in business correspondence.
• To meet legal obligations — where we are required to keep records for tax or legal purposes. Lawful basis: legal obligation.

You can withdraw consent for contact at any time by emailing the address above. We do not sell your personal data, and we do not use it for automated decision-making or profiling.

4. Who we share it with

We use a small number of trusted providers who process data on our behalf, under contract and appropriate safeguards:

• Supabase — secure database, authentication, and file storage, hosting the platform data in a UK (London) region.
• Vercel — hosting that serves the website.
• GoHighLevel — the customer relationship system used to manage follow-up and correspondence with you.

We share your data with these providers only as needed to run the service, and we do not pass your details to anyone else for their own marketing.

5. How long we keep it

We keep your account and saved work for as long as your account is active. If you ask us to delete your account, we remove your personal data and saved work within 30 days, except where we are required to retain certain records for legal or tax reasons (typically up to six years). Correspondence may be kept while there is an ongoing or prospective working relationship, and reviewed periodically thereafter.

6. Cookies

We use only the cookies needed to run a secure logged-in service:

• Strictly necessary — the sign-in session cookie that keeps you logged in as you move around the tools. Without it the service cannot work.

We do not currently use advertising or third-party tracking cookies. If that changes we will update this policy and ask for your consent where required. You can control or delete cookies through your browser settings, though disabling the necessary cookie will prevent sign-in.

7. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we process it;
• data portability (receive your data in a usable format);
• withdraw consent at any time.

To exercise any of these, email david@bradley-bowles.co.uk. We will respond within one month.

8. Complaints

If you are unhappy with how your data has been handled, please contact us first so we can put it right. You also have the right to complain to the UK regulator, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113.

9. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Material changes affecting how we use your data will be notified to you.