Privacy policy

1. Who we are

Poise is based in the United Kingdom. We are the controller of personal information used for our website, accounts and agency enquiries.

For privacy questions or to exercise your rights, email jxyozu3@gmail.com.

This notice covers the website, sign-in and enquiries. If work for a client requires us to handle other personal information, we will explain that processing separately.

2. Information we collect

• Contact information: your email address, name and information you include in messages to us.
• Account information: your account identifier, signup date, verification status and sign-in session information.
• Google profile information: if you use Google sign-in, Google may provide your account identifier, email address, name and profile image URL.
• Business information: a store URL or other business details you choose to provide.
• Technical information: our hosting and authentication providers may process IP addresses, browser details, request timestamps, URLs and security events to deliver and protect the service.

When you submit our contact form, we save your name, email address, message and any store URL you provide in Supabase so Poise can review and respond to your enquiry.

Google sign-in gives us basic identity information. We do not receive your Google password or request access to your Gmail, Google Drive or Google address book.

3. How and why we use it

We use information to maintain the account you request, reply to enquiries, discuss agency work and keep the website secure.

Account administration and website security

We rely on our legitimate interests in providing the secure account you request, preventing abuse and keeping the website reliable.

Agency enquiries

We rely on our legitimate interests in responding to business enquiries and discussing services with prospective clients. If you ask us to take steps before entering a contract with you as an individual, we may instead rely on those pre-contractual steps.

Privacy requests and legal requirements

We rely on legal obligations where a request or requirement must be handled under data protection law.

Signing in or sending an enquiry does not subscribe you to marketing emails.

4. Providers and access

Vercel hosts our website. Supabase handles authentication and stores account information and contact-form enquiries. Google provides identity information when you choose Google sign-in.

We use email services when you email us directly and when we reply to an enquiry.

Authorised Poise team members and providers can access information they need for the purposes in this notice. We may also disclose information when legally required. We do not sell your personal information.

Google also handles information under its own privacy policy when you use its services.

5. How long we keep it

We keep account information while it is needed to maintain your account. We review what is still needed when you request deletion or the account's purpose ends. Email us to request account deletion.

We keep enquiries and correspondence for as long as we need them to respond, manage work or meet legal obligations. We remove or anonymise information that is no longer needed.

Security logs are retained according to their purpose and provider settings. We may keep records needed for a complaint, security incident or legal obligation. Deleted information may remain in restricted backups until those backups expire.

6. Cookies and browser storage

We use local browser storage to remember your light or dark appearance preference. This stays on your device until you change it or clear your browser’s site data. You can use the default appearance without changing this preference.

Sign-in uses cookies to maintain your session and complete authentication securely. You can sign out and manage site data through your browser settings; blocking authentication cookies may prevent sign-in from working.

We currently have no advertising trackers, analytics integrations or session-replay tools in the website. We will explain any additional uses of browser storage before introducing them.

7. International processing and security

Poise is UK-based, but some providers operate internationally, including in the United States. Information may therefore be processed outside the UK.

Where UK transfer requirements apply, the relevant processing must be covered by appropriate arrangements, such as UK adequacy regulations or approved contractual safeguards. We check these arrangements when selecting and configuring providers. You can contact us for information about the arrangements relevant to your data.

We use appropriate technical and organisational measures to protect information, including restricted access and secure authentication. We limit the information collected to what is needed for the purposes described here.

8. Your rights

Depending on the circumstances, you may ask to access, correct or delete personal information, restrict its use or receive a portable copy.

You can object to our use of your information where we rely on legitimate interests.

Send requests to jxyozu3@gmail.com. We may ask for reasonable information to confirm your identity, and respond within the time required by law.

You can also raise a concern with the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint.

9. Updates

We will update this notice when our services or information practices change and show the revised date. Where appropriate, we will notify affected users directly.