Draft · privacy notice
Privacy notice
What Calderwood Partners collects when you use Calderwood Datasets, why, and what you can ask of us.
What we collect
- Your account: your email address and name, and, if you sign up with a password, a salted hash of it (never the password itself). If you sign in with Google, Google tells us your name, email address and whether it is verified.
- What you do here: your sessions, the sets and agreements you open and for how long, the agreements you accept, your downloads, the sets you star, and the messages you send us.
- Payments: what you bought, when and for how much. Stripe takes your card details; we never see them.
- Security: the address you reach us from, held briefly in memory to limit repeated sign-in attempts.
Why
To run your account and give you the data you have licensed (the contract between us); to keep records of licences and payments (a legal obligation); and to understand which sets are used, keep the site secure and answer your messages (our legitimate interests).
Who else handles it
Amazon Web Services sends our emails and stores archives; Google provides Google sign-in; Stripe takes payments; OVHcloud hosts the site in the UK and EU. Each handles your data only to provide its service to us.
How long we keep it
Your account for as long as it is open; records of licences and payments for six years after they end, as the law requires; activity records for two years.
Your rights
You can ask for a copy of your data, for it to be corrected or deleted, or object to how we use it. Write to us at the address below. You can also complain to the Information Commissioner's Office (ico.org.uk).
Cookies
We set one cookie to keep you signed in, and a short-lived one while you sign in with Google. Neither tracks you elsewhere, and there are no advertising or analytics cookies.