DesignDesk/privacy.html at master · ms170888/DesignDesk · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
<!DOCTYPE html>
<html lang="en">
<head>
  <meta charset="UTF-8">
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
  <title>Privacy Policy | DesignDesk</title>
  <meta name="description" content="DesignDesk Privacy Policy. How we collect, use, and protect your data. GDPR compliant.">
  <link rel="canonical" href="https://ms170888.github.io/DesignDesk/privacy.html">
  <meta name="robots" content="noindex">
  <link rel="preconnect" href="https://fonts.googleapis.com">
  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&display=swap" rel="stylesheet">
  <style>
    *, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
    body { font-family: 'Inter', -apple-system, sans-serif; color: #1e293b; background: #fafafa; line-height: 1.6; }
    .container { max-width: 700px; margin: 0 auto; padding: 80px 24px; }
    h1 { font-size: 32px; font-weight: 800; margin-bottom: 8px; }
    .updated { font-size: 13px; color: #64748b; margin-bottom: 40px; display: block; }
    h2 { font-size: 20px; margin: 32px 0 12px; }
    p, li { font-size: 14px; color: #475569; line-height: 1.8; margin-bottom: 12px; }
    ul { margin-left: 20px; margin-bottom: 16px; }
    a { color: #6366f1; text-decoration: none; }
    a:hover { text-decoration: underline; }
    .back { display: inline-flex; align-items: center; gap: 6px; font-size: 14px; margin-bottom: 32px; }
  </style>
</head>
<body>
  <div class="container">
    <a href="/" class="back">&larr; Back to DesignDesk</a>
    <h1>Privacy Policy</h1>
    <span class="updated">Last updated: 7 March 2026</span>

    <h2>1. Who We Are</h2>
    <p>DesignDesk ("we", "our", "us") is a project management platform for interior designers. This policy explains how we handle your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.</p>

    <h2>2. What Data We Collect</h2>
    <ul>
      <li><strong>Account data:</strong> Name, email address, studio name, team size (when you sign up or join our waitlist)</li>
      <li><strong>Usage data:</strong> Pages visited, features used, time spent (anonymised analytics)</li>
      <li><strong>Payment data:</strong> Processed securely by Stripe. We never store card numbers</li>
      <li><strong>Project data:</strong> Any content you create within the platform (projects, invoices, mood boards, etc.)</li>
    </ul>

    <h2>3. How We Use Your Data</h2>
    <ul>
      <li>To provide and improve the DesignDesk service</li>
      <li>To process payments and manage subscriptions</li>
      <li>To send product updates and announcements (you can opt out anytime)</li>
      <li>To provide customer support</li>
      <li>To comply with legal obligations</li>
    </ul>

    <h2>4. Legal Basis (GDPR)</h2>
    <p>We process your data under the following legal bases:</p>
    <ul>
      <li><strong>Contract:</strong> To deliver the service you signed up for</li>
      <li><strong>Consent:</strong> For marketing communications (opt-in only)</li>
      <li><strong>Legitimate interest:</strong> For analytics and product improvement</li>
    </ul>

    <h2>5. Data Storage and Security</h2>
    <p>Your data is stored on servers within the UK/EEA. We use industry-standard security measures including 256-bit TLS encryption, access controls, and regular security audits. Payment processing is handled by Stripe (PCI DSS Level 1 compliant).</p>

    <h2>6. Data Sharing</h2>
    <p>We do not sell your data. We share data only with:</p>
    <ul>
      <li><strong>Stripe:</strong> Payment processing</li>
      <li><strong>Hosting providers:</strong> To serve the application</li>
      <li><strong>Analytics:</strong> Anonymised usage data only</li>
    </ul>

    <h2>7. Your Rights</h2>
    <p>Under GDPR, you have the right to:</p>
    <ul>
      <li>Access your personal data</li>
      <li>Correct inaccurate data</li>
      <li>Delete your data ("right to be forgotten")</li>
      <li>Export your data in a portable format</li>
      <li>Object to processing</li>
      <li>Withdraw consent at any time</li>
    </ul>
    <p>To exercise any of these rights, email us at <a href="mailto:hello@designdesk.app">hello@designdesk.app</a>.</p>

    <h2>8. Cookies</h2>
    <p>We use essential cookies only (session management, authentication). We do not use third-party advertising cookies.</p>

    <h2>9. Data Retention</h2>
    <p>We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymised analytics data may be retained indefinitely.</p>

    <h2>10. Changes to This Policy</h2>
    <p>We'll notify you of significant changes via email. Minor updates will be reflected by the "last updated" date above.</p>

    <h2>11. Contact</h2>
    <p>For privacy inquiries: <a href="mailto:hello@designdesk.app">hello@designdesk.app</a></p>
  </div>
</body>
</html>