Privacy Notice

1. Who we are

This service (the “1954 Act” app) is provided by mcgarrigle & co (“we”, “us”). We are the data controller for the personal data described in this notice. If you have any question about privacy, or wish to exercise your rights, contact us at chris@mcgarrigle.com.

2. Personal data we collect

• Account data — email address, login credentials handled by our authentication provider, and account creation date.
• Content you submit — questions to the assistant, lease documents, Section 25 or Section 26 notices, and any text you paste for translation or analysis.
• Usage data — number of runs used, plan status, access codes redeemed, feature interactions and error reports.
• Technical data — IP address, device and browser information, and log data generated when you use the service.
• Support messages — correspondence you send us by email or WhatsApp.

Card and billing details are collected and processed by Paddle, not by us. We never see or store your full payment card details.

3. Why we use it, and our legal basis

• To create and manage your account and provide the service — performance of our contract with you.
• To generate assistant answers, action plans, lease synopses, notice reports and translations — performance of our contract with you.
• To email you a copy of a lease synopsis you have generated — performance of our contract with you.
• To meter free runs, manage subscriptions and prevent abuse of access codes — our legitimate interests in operating a sustainable service.
• Security, fraud prevention and debugging — our legitimate interests in keeping the service safe and working.
• Product improvement and aggregate analytics — our legitimate interests; we use aggregated or de-identified data wherever possible.
• Complying with legal, accounting and tax obligations — legal obligation.
• Optional marketing emails — your consent, which you can withdraw at any time.

4. Who we share it with

• Merchant of Record — Paddle.com Market Ltd, which handles the sale of subscriptions, billing, subscription management, invoicing, tax compliance, refunds and related customer service.
• Hosting, database and authentication providers — who host the application and store your account and usage records.
• AI model providers — content you submit for analysis, translation or assistant answers is processed by third-party model providers solely to return your result.
• Email delivery provider — to send account and lease synopsis emails.
• Professional advisers — legal, accounting and insurance advisers where needed.
• Authorities — where we are required to disclose data by law.

We do not sell your personal data.

5. International transfers

Some of our providers process data outside the UK and EEA. Where that happens we rely on UK/EU adequacy decisions or on standard contractual clauses together with appropriate additional safeguards.

6. Retention

We keep account and usage records for as long as your account is active and for up to 12 months afterwards, unless a longer period is required for legal, tax or dispute purposes. Documents and text you submit for analysis are retained only as long as needed to produce and deliver your result and to support you afterwards; they are then deleted or anonymised. You can ask us to delete your account and associated content at any time.

7. Your rights

Subject to UK and EU data protection law, you have the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. Email chris@mcgarrigle.com and we will respond within one month. You may also complain to the UK Information Commissioner’s Office (ico.org.uk) or your local supervisory authority.

8. Security

We apply appropriate technical and organisational measures, including encryption in transit, access controls, row-level database security and least-privilege service credentials. No system is completely secure, so please keep your login credentials confidential.

9. Cookies and local storage

We use strictly necessary cookies and browser local storage to keep you signed in, to remember your sidebar order, reform watchlist and recent checkout diagnostics. These are essential to the service. We do not use advertising cookies. You can clear cookies and local storage in your browser settings, though signing in will then be required again.

10. Children

The service is intended for business users and is not directed at children under 16.

11. Changes

We may update this notice from time to time. We will change the “last updated” date above and, for material changes, notify you by email or in the app.