Privacy policy

Template only. Fill in the parts in [square brackets] and have it checked before you take payments. Last updated [date].

Who we are

InDate is run by [your full name or company name], trading as MHU Solutions, [address]. Contact: [email]. [If you register with the ICO, add your registration number.]

Your account

When you sign up we keep your name, email, company name and login details so you can use InDate, and your billing details are held by Stripe, our payment provider. We never see or store your card number.

Your team’s data

The details you add about your workers (names, job titles, departments, mobile numbers, email addresses, card and certificate details, photos and documents) belong to your company. Your company is the data controller and we process it on your behalf, only to run InDate. A data processing agreement is available on request.

Who helps us run InDate

Supabase (database, logins and file storage), Stripe (payments), Resend (reminder emails) and Cloudflare (website hosting). Each only receives what it needs to do its job. [Add the regions where each stores data.]

How long we keep it

For as long as your account is open. If you close it, we delete your company’s data within [30] days, apart from billing records we must keep by law.

Your rights

You can see, export, correct or delete your data at any time from inside InDate, or by contacting us. You can also complain to the Information Commissioner’s Office (ico.org.uk).