Privacy Policy

1. Who We Are

Sharpe Decisions operates the website sharpedecisions.co.uk ("the Service"). We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any questions about this policy, you can contact us at:
Sharpe Decisions
Website: sharpedecisions.co.uk
Email: freddie@sharpedecisions.co.uk

2. What Data We Collect

We collect and process the following personal data:

Contact Information

• Full name
• Email address (submitted via contact forms or account registration)

Payment Information

• Billing name and address
• Payment card details (processed securely via Stripe — we do not store full card details on our servers)

Usage Data

• IP address, browser type, and device information collected automatically when you use our Service

3. How We Use Your Data

We use your personal data for the following purposes:

• To provide and maintain our software service
• To process payments and manage your subscription
• To respond to enquiries submitted via contact forms
• To send important service-related communications (e.g. billing notices, updates)
• To comply with legal and regulatory obligations

4. Legal Basis for Processing

We process your personal data under the following lawful bases (as defined by UK GDPR):

• Contract performance — to deliver the service you have signed up for
• Legitimate interests — to manage and improve our platform
• Legal obligation — where we are required to retain data by law
• Consent — where you have explicitly opted in (e.g. marketing emails)

5. Payment Processing

Payment transactions are handled by a third-party payment processor. We do not store your full card number or CVV on our systems. Our payment provider is independently PCI-DSS compliant. Please refer to their own privacy policy for details on how they handle your payment data.

6. Data Sharing

We do not sell your personal data. We may share your data with trusted third parties only where necessary, including:

• Payment processors (to handle transactions)
• Hosting and infrastructure providers (to run our service)
• Analytics providers (aggregated, anonymised data only)

All third parties are required to handle your data securely and in accordance with UK GDPR.

7. Data Retention

We retain your personal data only for as long as necessary:

• Account data — retained for the duration of your account, plus up to 6 years after closure (for legal and tax purposes)
• Contact form submissions — retained for up to 2 years
• Payment records — retained for 6 years in line with HMRC requirements

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate or incomplete data
• Erase your data (where applicable)
• Restrict or object to processing
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please contact us at [your contact email]. We will respond within 30 days.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

Our website may use essential cookies to ensure the service functions correctly. We do not use tracking or advertising cookies without your consent. For full details, please see our Cookie Policy [link if applicable].

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Payment data is transmitted using SSL/TLS encryption.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The "Last updated" date at the top of this page will always reflect the most recent version.