Privacy Notice

Who is responsible for your information

SubCon Systems is the controller for the account, website and service information described in this notice. Privacy questions and rights requests can be sent to hello@subconsystems.co.uk.

Information we collect

• Account and business details, including names, email addresses, company information, roles and authentication identifiers.
• Customer, supplier, project, quotation, invoice, document and other records that authorised users add to a workspace.
• Subscription identifiers, plan, payment status and limited billing information received from Stripe. Stripe handles full payment-card details.
• Support messages, connected-service settings and information exchanged through integrations you choose to enable.
• Device, browser, IP address, security events, usage and diagnostic logs needed to operate and protect the service.

How we use information

• To create accounts and provide the features you request.
• To manage trials, subscriptions, billing and customer support.
• To secure, diagnose, maintain and improve the service.
• To communicate service information and answer enquiries.
• To meet legal obligations and protect legitimate interests.

We use information where it is needed to perform the service contract, meet a legal obligation, protect legitimate business and security interests, or where consent is the appropriate basis. We do not sell personal information.

Business workspace information

A customer business controls the records its authorised users enter about customers, suppliers, workers and projects. That business is responsible for telling those people how their information is used and for having a lawful basis to add it to SubCon Systems.

Providers and international processing

We use service providers for hosting, databases, authentication, payments, email delivery, support and selected integrations. They may process information only as needed to provide those services. Where information is processed outside the United Kingdom, we use appropriate contractual or legal safeguards where required.

Retention and security

We keep account and workspace information for as long as needed to provide the service and for a reasonable period afterwards for security, backup, legal and record-keeping purposes. Billing and transaction records may be kept for statutory periods. We use encrypted connections and access controls, but no online service can guarantee absolute security.

Your rights

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase or restrict use of your personal information, object to processing, or request portability. Contact us to exercise a right. You can also complain to the Information Commissioner's Office.

Changes to this notice

We may update this notice as the service and its providers change. The effective date below identifies the current version.