Privacy Policy

Last updated: 25 September 2026

This policy explains how Corley Marsh, trading as Upcraftly ("Upcraftly", "we"), 125 Rowney Avenue, Saffron Walden, CB10 2YE, uses personal data.

Two kinds of data

• Business account holders (the businesses that use Upcraftly and their team logins): we are the controller of this data.
• Customers of those businesses (people who book appointments): the business you booked with is the controller. We process your data on their behalf as their processor. Please contact the business first about your data; we'll help them respond.

What we collect

• Account holders: name, business name, email, password (stored only as a secure hash), billing status, and security logs such as sign-in attempts.
• Booking customers: name, email, phone, booking details, notes you add, and any form answers the business asks for. Card details are entered directly with Stripe; we never see or store full card numbers.

Why we use it and our lawful basis

• To provide the service and take subscription payments — contract.
• To keep the service secure, prevent fraud and abuse — legitimate interests.
• To send booking confirmations and reminders on behalf of businesses — the business's instructions.
• To meet legal and accounting duties — legal obligation.

We don't sell personal data or use it for advertising.

Who we share it with

• Cloudflare (hosting and database)
• Stripe (subscription and deposit payments)
• Resend (sending emails)

Some of these providers may process data outside the UK. Where they do, they use approved safeguards such as the UK International Data Transfer Addendum.

How long we keep it

Account data is kept while your account is open and for 6 years afterwards for accounting purposes. Booking customer data is kept for as long as the business chooses (their retention setting defaults to 36 months) and deleted when the business closes its account.

Cookies

We use one essential cookie to keep you signed in. We don't use advertising or analytics cookies.

Your rights

You can ask for a copy of your data, or ask us to correct, delete or restrict it, or object to how we use it. Email info@upcraftly.co.uk. If you're unhappy, you can complain to the Information Commissioner's Office at ico.org.uk.