Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account Information: Email addresses, names, and business information when you create an account
• Payment Information: Payment details processed securely through Stripe (we don't store card details)
• Usage Data: Information about how you use our service, including payment link creation and management
• Client Information: Names, emails, and business details of your clients when you add them to your account
• Technical Data: IP addresses, browser information, and device data for security and service improvement

2. How We Use Your Information

We use your information for the following purposes:

• Service Provision: To provide payment processing services and manage your account
• Payment Processing: To facilitate payments between you and your clients
• Communication: To send payment reminders, service updates, and important notifications
• Security: To protect against fraud and ensure the security of our platform
• Improvement: To analyze usage patterns and improve our services
• Legal Compliance: To comply with legal obligations and regulations

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract: To fulfill our service agreement with you
• Legitimate Interest: For security, fraud prevention, and service improvement
• Consent: For marketing communications (where you have opted in)
• Legal Obligation: To comply with tax and financial regulations

3A. Stripe Connect and Connected Account Data

When you connect your Stripe account to Simply-Link using Stripe Connect, we access certain data from your Stripe account ("Connected Account Data"). This is necessary to provide our Platform Services to you.

What Connected Account Data We Access:

• Account Information: Stripe account ID, account status, verification status, business type
• Transaction Data: Payment amounts, payment status, transaction history, refund information
• Payout Information: Payout schedules, payout history (amounts and dates only, not bank details)
• Dispute Data: Chargeback information and dispute status
• Customer Data: Customer email addresses associated with transactions (to send payment links and reminders)

How We Use Connected Account Data:

• Display your payment history and transaction details in your dashboard
• Calculate and display fees and net amounts
• Send payment confirmations and receipts to your customers
• Send payment reminders for unpaid links
• Generate reports and analytics about your payments
• Detect and prevent fraud
• Comply with legal and regulatory requirements

Data Sharing with Stripe:

As required by the Stripe Connect Platform Agreement, we share information about you with Stripe, including:

• Your email address and account details
• Your business information (name, type, address)
• Transaction data related to payments processed through your links
• Information necessary for compliance and fraud prevention

Stripe processes this information according to their Privacy Policy . We have no control over, and assume no responsibility for, Stripe's privacy practices.

Data Protection:

We use reasonable security measures to protect Connected Account Data from unauthorized access or disclosure. We will promptly notify you and Stripe if we become aware of any unauthorized access to or disclosure of Connected Account Data.

4. Data Sharing and Third Parties

We may share your information with:

• Stripe: For payment processing and Stripe Connect services (see section 3A above). Review their Privacy Policy
• MailerSend: For email delivery services
• Supabase: For database and hosting services
• Legal Authorities: When required by law or to protect our rights

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Receive your data in a structured format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, contact us at privacy@simply-link.co.uk

6. Data Retention

We retain your data for the following periods:

• Account Data: Until you delete your account or request deletion
• Payment Records: 7 years (for tax and financial compliance)
• Logs and Analytics: 90 days
• Marketing Data: Until you withdraw consent

7. Data Security

We implement appropriate security measures to protect your data:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication
• Secure hosting with industry-standard security

8. International Transfers

Your data may be processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place for such transfers, including:

• Adequacy decisions by the European Commission
• Standard contractual clauses
• Other appropriate safeguards

9. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session and preferences
• Analyze website usage and performance
• Provide security features

You can control cookie settings through your browser preferences.

10. Contact Information

If you have questions about this Privacy Policy or our data practices, contact us:

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending you an email notification
• Displaying a notice in your account dashboard