Privacy Policy
What we collect, why, and your rights
1. Who we are
Local Sorted (localsorted.com) is a trading name of POLICYANDPLAY LTD, a company registered in England and Wales. We are not VAT registered. POLICYANDPLAY LTD is the data controller for the personal data described in this policy.
Email: hello@localsorted.com
Your clients' information. When you fill in a document, your clients' details stay on your device and in any PDF or printout you make. They are not sent to us. You are the data controller for your clients' information, so keep completed forms secure.
2. What we collect and why
| Data | Why we use it | Lawful basis | How long we keep it |
|---|---|---|---|
| Account email address and password (stored scrambled by Supabase, never readable by us), and which packs you bought | To create your account, sign you in and give you the documents you paid for | Contract | While you have an account. We delete it within 30 days of you asking, apart from purchase records |
| Purchase records: email, billing details, what you bought, the amount and date. Card details go straight to Stripe; we never see them | To take payment, send your confirmation and keep tax records | Contract; legal obligation | 6 years after the end of the financial year of the purchase |
| Emails we send you: confirmation and password link, sent through Resend | To deliver what you bought and let you sign in | Contract | Delivery logs are kept by Resend for a short period |
| Details you type into a document, such as your name, business name and address | To fill in your documents | Contract | Saved in your own browser, not on our servers, until you clear them |
| Emails you send us | To reply and keep a record of what was agreed | Legitimate interests | Up to 2 years after the conversation ends |
| Technical data: IP address, browser type, pages requested and time, plus records of password reset requests | To keep the site secure, stop abuse and fix faults | Legitimate interests | Server logs are kept for up to 30 days |
We do not use advertising or analytics cookies. We do not make decisions about you using only automated processing that have legal or similarly significant effects.
3. Who we share it with
- Netlify (US): website hosting and server functions
- Supabase: database and account sign-in
- Stripe (US and Ireland): payments
- Resend (US): sending emails
- jsDelivr and unpkg (content delivery networks): the sign-in library on account pages, and the Word-export library when a Pro customer downloads a Word file. Like any web request they receive your IP address; they set no cookies
- postcodes.io: if you use the address look-up in a document, the postcode you type is sent to it to find the address. Nothing else is sent
We never sell personal data. We may share data if the law requires it, or with a buyer if the business is sold, in which case this policy continues to protect it.
4. International transfers
Some providers are in the US. We rely on the UK Extension to the EU-US Data Privacy Framework where the provider is certified, or the ICO's International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
5. How long we keep it
The table in section 2 sets out how long we keep each type of data. In short: purchase records for 6 years for tax; account data until you ask us to delete it (we do so within 30 days); server logs for up to 30 days.
6. Your rights
You have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data erased
- restrict how we use it
- receive it in a portable format
- object to how we use it
- withdraw consent at any time, where we rely on consent
Email hello@localsorted.com to use any of these rights. We reply within one month.
7. Complaints
If you are unhappy with how we have handled your data, email hello@localsorted.com with 'Data protection complaint' in the subject. We will acknowledge within 30 days and tell you the outcome. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113.
8. Cookies
We only use storage that is strictly necessary. See our cookie policy.
9. Children
Local Sorted is for UK small business owners. It is not aimed at children under 13 and we do not knowingly collect their data.
10. Changes to this policy
We update this policy when the way we work changes. The date at the top shows the latest version. If a change materially affects how we use data you have already given us, we will email you before it takes effect.