Privacy Policy
Last updated: [PLACEHOLDER: date]
This policy explains how Shushpost uses your personal data, written for UK GDPR and the Data Protection Act 2018. Shushpost is for adults (18+) in the UK only. We don't knowingly collect children's data; if we learn we have, we delete it.
Who we are
The data controller is [PLACEHOLDER: registered company name], trading as Shushpost, a company registered in [PLACEHOLDER: England and Wales / Scotland / Northern Ireland] with company number [PLACEHOLDER: company number]. Registered address: [PLACEHOLDER: registered address]. ICO registration number: [PLACEHOLDER: ICO registration number]. Contact: requests@shushpost.com.
What we hold, why, and for how long
| Data | Purpose | Lawful basis | Retention |
|---|---|---|---|
| Your name, email and password (stored securely, hashed) | Creating and running your account | Contract | Until you close your account, then [PLACEHOLDER: retention period] |
| Your postal address and signed authority / signed opt-out letters | Registering you with opt-out services and objecting to senders on your behalf | Contract | [PLACEHOLDER: retention period] after the last request we sent for you, so we can prove the objection was made |
| Photos of envelopes and junk mail you snap | Identifying the sender so we can contact them | Contract | [PLACEHOLDER: retention period] |
| Companies we contact for you, the email address used, its source, and email logs (sent, replies, bounces) | Sending objections, chasing replies and keeping evidence | Contract; legitimate interests (keeping proof the request was made) | [PLACEHOLDER: retention period] |
| Payment records (what you bought, when, amount, Stripe customer ID). We never see or store card numbers | Taking payment, renewals and refunds | Contract; legal obligation (tax and accounting records) | [PLACEHOLDER: retention period — HMRC normally requires 6 years] |
| Your 18+ confirmation and when you gave it | Making sure the service is only used by adults | Legal obligation; legitimate interests | As long as your account exists |
| Marketing email preference | Sending optional news and offers only if you said yes | Consent (you can withdraw any time) | Until you change it or close your account |
| Service notification preference | Updates about your opt-outs and senders | Legitimate interests | Until you change it or close your account |
| Cookie and storage choices | Remembering your consent | Legal obligation (PECR) | Until you clear your browser storage or change it |
| Messages you send us | Customer support | Legitimate interests | [PLACEHOLDER: retention period] |
Where we rely on legitimate interests, it is to run a reliable service and keep evidence that requests were made for you. You can object (see your rights below).
Who we share it with
We never sell your data. We use these processors, under contracts that require them to protect it:
- Supabase — database, file storage and sign-in.
- Stripe — payments. Stripe handles your card details directly; we never receive them.
- [PLACEHOLDER: email provider name] — sending emails to you and to companies on your behalf.
- Lovable — website hosting.
- AI and web search providers used to read envelope photos and find company contact details: [PLACEHOLDER: AI / search provider names].
We also share your name, address and objection with the companies and opt-out services (such as the Mailing Preference Service, DMA Your Choice, Royal Mail and the Fundraising Preference Service) that you've asked us to contact. That's the point of the service.
International transfers
Some processors may store or access data outside the UK (for example in the EU or US). Where they do, we rely on UK adequacy regulations, the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses, or the UK–US Data Bridge where the provider is certified. Details per provider: [PLACEHOLDER: transfer locations and safeguards per processor].
Your rights
You can ask us to: access a copy of your data; correct it; erase it; restrict how we use it; object to our use of it (including any direct marketing, always); and receive it in a portable format. Where we rely on consent, you can withdraw it at any time — for marketing emails, use the unsubscribe link in any email or your Account page. We'll reply within one month.
Downloading or deleting your data
From your Account page you can download all your data as a file, or delete your account. Deleting removes your account, address, signed authority, photos, opt-out requests, the companies we contacted for you and our email records, and cancels any auto-renewal. We keep only your payment records (what you bought, when and how much) for as long as UK tax law requires, and Stripe keeps its own payment records. Registrations already made with outside opt-out services stay with those services.
Security
Data is encrypted in transit, access is restricted to your account, and envelope photos are kept in private storage that only you can reach, shared only through links that expire.
Cookies
See our Cookie Policy.
Contact and complaints
Email requests@shushpost.com or write to [PLACEHOLDER: registered address]. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office: ico.org.uk, telephone 0303 123 1113.