SundayHQ

Privacy

Last updated: [DATE]. Written to be read, not skimmed past.

SundayHQ is run by [LEGAL NAME / TRADING NAME], based in the United Kingdom ("we"). This page explains what we hold about you and why. The short version: we keep the minimum needed to run the service, we don't sell or share it for advertising, and you can have it deleted by asking.

What we hold

Your account: your email address, your church's name, and a securely hashed password (we cannot see the password itself).

Your parish's setup: the branding you give us — church name as printed, colours, badge or logo, cover image, footer text — and the service plans you save: dates, readings, hymns, psalm text, and notices.

Billing: payment is handled entirely by Stripe. We never see or store your card number. We keep Stripe's reference for your subscription and its status (trialing, active, cancelled) so we know what you can print. Stripe's own privacy policy is at stripe.com/privacy.

Emails we send: transactional only — password resets and messages about your account. No marketing unless you separately ask for it.

What we don't do

No advertising trackers, no analytics cookies, no selling or renting data, no profiling. The only cookie is the one that keeps you logged in.

Where it lives

Data is stored on servers in London (Fly.io) with encrypted backups. Emails are sent through [EMAIL PROVIDER]. Payments run through Stripe. These providers process data on our instructions.

How long we keep it

For as long as you have an account. If you cancel, your plans and settings stay so you can return; if you ask us to delete your account, we remove it and everything in it within 30 days, except records we must keep for tax purposes (invoices).

Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email [CONTACT EMAIL] and we'll act within a month. If you're unhappy with how we handle it, you can complain to the ICO at ico.org.uk.

Changes

If this policy changes meaningfully, we'll email account holders before the change takes effect.