Draft for review before launch.
Privacy notice
[Company name] is the controller for personal data collected through DelPulse.
What we collect
- Account details: name, work email and a securely hashed password
- Organisation membership and subscription status
- Billing details, handled by Stripe; we do not store card numbers
Why
To provide your account and subscription (contract), and to keep the service secure (legitimate interests).
Where it is stored
[Hosting provider and region, for example UK].
How long
For as long as your account is open, then [period] for accounting records.
Your rights
You can ask to see, correct or delete your data by contacting [email]. You can complain to the Information Commissioner's Office.