Privacy Policy

1. Who We Are

CLPeasy™ is operated by Michaela Feeley. Our registered business address is CLPeasy, 66 Paul Street, London, EC2A 4NA. We are the data controller for your personal data.

Contact: support@clpeasy.com

2. What Data We Collect

Data	Why we collect it	Legal basis
Email address	Account creation, login, system emails	Contract performance
Password (hashed)	Account security	Contract performance
Business name & address	Appears on your CLP labels	Contract performance
Label data (scent name, hazard info etc)	Generating and saving your labels	Contract performance
Payment data	Processing subscriptions (handled by Stripe — we do not store card details)	Contract performance
Usage data (pages visited, features used)	Improving the service	Legitimate interests
IP address	Security and fraud prevention	Legitimate interests

3. How We Use Your Data

We use your data to:

• Provide and maintain the CLPeasy service
• Send account-related emails (verification, password reset, subscription notifications)
• Process payments and manage your subscription
• Improve and develop the service
• Comply with legal obligations
• Prevent fraud and abuse

We will never sell your personal data to third parties or use it for advertising purposes.

4. Data Storage and Security

Your data is stored securely in Supabase (AWS eu-west-2, London region). All data is encrypted in transit using TLS and encrypted at rest. We implement appropriate technical and organisational measures to protect your data.

Payments are processed by Stripe — we do not store your card details. Stripe is PCI DSS compliant.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or tax purposes (typically 7 years for financial records).

6. Third Parties

We share data with the following third parties only where necessary to provide the service:

• Supabase — database and authentication (AWS London region)
• Stripe — payment processing
• Zoho Mail — transactional email delivery
• Brevo — onboarding and account email delivery (e.g. welcome and trial reminder emails)
• Google — optional Google OAuth login (only if you choose to sign in with Google)
• Netlify — website hosting

All third parties are required to handle your data in accordance with applicable data protection law.

7. Cookies

We use cookies and similar technologies. Please see our Cookie Policy for full details.

8. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit how we process your data
• Portability — receive your data in a portable format
• Object — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent

To exercise any of these rights, contact us at support@clpeasy.com. We will respond within 30 days.

9. Children's Privacy

CLPeasy is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. The date at the top of this page shows when it was last updated.

11. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

12. Contact

For any privacy-related queries, contact us at support@clpeasy.com.