Privacy policy
Last updated: 11 May 2026
1. Who we are
Data controller: [LEGAL ENTITY — TO BE CONFIRMED]
Contact: nick@joinresonance.co.uk
2. What we collect and why
| Data | When collected | Why |
|---|---|---|
| Name, email address | Sign-up | Create your account and contact you about pools |
| Home postcode | Sign-up | Verify you are in our service area |
| Google account profile | If you sign in with Google | Authenticate you securely |
| Payment method | Pre-commitment | Authorise and capture payment via Stripe |
| Pool activity and votes | When you use the platform | Run the service and process outcomes |
We do not store card numbers or CVV codes. Payment data is handled directly by Stripe.
3. Legal basis (UK GDPR)
- Contract performance — processing your name, email, and postcode to create and manage your account; processing payment data to handle pre-commitments and voting outcomes.
- Legitimate interests — sending service updates and pool stage notifications.
- Legal obligation — retaining financial records as required by UK law.
4. Who we share data with
| Service | Purpose | Privacy policy |
|---|---|---|
| Stripe | Payment processing | stripe.com/privacy |
| Authentication (if you use Google sign-in) | policies.google.com/privacy | |
| Resend | Transactional email delivery | resend.com/privacy |
| Vercel | Hosting and infrastructure | vercel.com/legal/privacy-policy |
| Airtable | Data storage | airtable.com/privacy |
We do not sell your data or share it with advertisers.
5. How long we keep it
- Account data — retained while your account is active. Deleted within 30 days of a written deletion request.
- Financial records — payment authorisations and captures retained for 7 years to comply with UK tax and accounting law.
- Email delivery logs — 90 days.
6. Your rights
Under UK GDPR you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data (subject to legal retention obligations)
- Restrict or object to processing
- Data portability
To exercise any right, email nick@joinresonance.co.uk. We will respond within 30 days.
7. Complaints
You have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
We use only session cookies required for authentication. We do not use tracking, analytics, or advertising cookies.
9. Changes to this policy
We may update this policy from time to time. We will notify you of material changes by email before they take effect.
10. Contact
Privacy questions: nick@joinresonance.co.uk