Privacy

Draft for review. Accurate for the site as built today. If you add analytics, a mailing list or any other tool, this needs updating before that tool goes live.

Who we are

Good Sheets is a trading name of Mark Hawley, sole trader, of [your address], who is the data controller for this site. Contact us at .

Your figures never reach us

Worth saying first, because it's the part people care about: the spreadsheets run on your computer, or in your own Google Drive. Nothing you type into them is sent to us. We never see your income, your expenses, your clients or your tax position. We couldn't if we wanted to.

What we do collect

• Your email address, given at checkout, so we can send your files and deal with support. Lawful basis: performance of a contract.
• Payment and billing details, collected and held by Stripe, not by us. We see only the last four digits of your card and the billing country, through Stripe's own dashboard.
• A record of what you bought and when, because HMRC requires sellers to keep business records. Lawful basis: legal obligation.

Cookies

We set no tracking or advertising cookies, and there is no cookie banner because there is nothing to consent to. Your basket is held in your browser's local storage — it never leaves your device and we can't read it. Stripe sets its own cookies on its checkout pages for fraud prevention; see the Stripe privacy policy.

Who else handles your data

• Stripe — payment processing. [Stripe Payments UK Ltd]
• Resend — sending your delivery email.
• Vercel — hosting this site.
• Our accountant — bookkeeping and tax returns.

We don't sell your data, and we don't send marketing. If that ever changes you'll be asked to opt in first, and this page will say so.

How long we keep it

Order and payment records: 6 years, to meet HMRC record-keeping requirements. Support emails: 2 years. Download links expire after 14 days and carry no personal data beyond the order reference.

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask for it in a portable format. Email us and we'll respond within one month. Note that we can't delete records we're legally required to keep for HMRC, though we can tell you exactly what those are.

If you're unhappy with our response you can complain to the Information Commissioner's Office.