Privacy Policy

Who we are

Joseph Norton, trading as SashMark, is the controller of the personal information used by the SashMark service.

Contact: sashmarksupport@gmail.com

Information we collect

We collect and use only the information needed to operate SashMark, including:

• your email address when you make a purchase or use an email-based access link;
• purchase and payment-status information, including the product bought, amount, order status and relevant Stripe customer, Checkout and payment identifiers;
• property searches and report activity connected with your access, including property details, generated report history and entitlement usage; and
• necessary technical and security information, such as opaque or hashed access-token records and basic service logs used to operate and protect the website.

Stripe Checkout collects payment details directly. SashMark does not store your full payment-card details. If you do not provide the information needed for a purchase and report, we may be unable to provide that service.

How we use your information

We use this information to process purchases; create reports and maintain access to reports you have bought; recognise existing reports without charging an allowance twice; provide customer support; protect SashMark against misuse, fraud and security threats; and keep records needed for legal, tax and accounting purposes.

Legal basis

We mainly use your information because it is necessary to enter into or perform our contract with you and provide the service you purchase. We also use information where necessary for our legitimate interests in running, securing and improving the reliability of SashMark, provided those interests do not override your rights. We keep and use information where the law requires us to do so, including for tax and accounting records.

Payments and service providers

Payments are processed by Stripe. Stripe receives the information needed to complete and manage the payment and handles your payment details under its own privacy terms. SashMark is hosted using Cloudflare, which provides website delivery, database, storage, logging and security infrastructure. These providers process personal information for us or for their own legal and payment obligations. Where they process information outside the UK, appropriate lawful transfer safeguards are used.

How long we keep information

We keep personal information only for as long as it is needed to provide and preserve access to purchased reports, deal with support or security issues, maintain necessary transaction and business records, and meet legal obligations. Different records may therefore be kept for different lengths of time. We delete or anonymise information when it is no longer needed, where reasonably possible.

Your rights

UK data-protection law may give you the right to ask for access to your personal information, to have inaccurate information corrected, to request deletion in applicable circumstances, or to object to or restrict certain processing in applicable circumstances. These rights can depend on why we use the information and whether we must keep it by law.

To make a request, email sashmarksupport@gmail.com. We may need to verify your identity before acting on it.

Complaints

If you have concerns about how your information is handled, please contact us first. You may also complain to the UK Information Commissioner's Office through ico.org.uk.

Changes

We may update this policy when the service or legal requirements change; the latest version and date will appear on this page.