Privacy Policy

We keep this short and plain. If anything below is unclear, email us and we will rewrite it.

Who we are

This site (command-centre.uk) is operated by Stephen Spence, a sole trader based in the United Kingdom. We are the “data controller” for any personal information collected through this website.

What we collect

We collect only what is needed to run this website and understand whether it is useful to visitors.

Information you give us directly

• Anything you send to us by email or via the contact form (your name, email address, and the content of your message)
• Information you provide when you start a subscription — handled by Stripe (see “Third parties” below)

Information collected automatically

• Anonymised analytics data via Google Analytics 4 — pages viewed, approximate location (country/region), device and browser type, referring source, session duration
• Standard server log information needed to deliver the site securely — IP address, timestamp, user agent

Cookies

A cookie is a small text file your browser stores. We use the minimum number of cookies needed to run the site and (with your consent) to understand which pages help visitors most.

Analytics cookies are not set until you click Accept all on the consent banner. If you click Reject non-essential, no analytics cookies are placed and we receive only anonymised, modelled signals via Google’s Consent Mode v2.

Lawful basis for processing

• Consent — for setting analytics cookies (UK PECR Regulation 6 and UK GDPR Article 6(1)(a))
• Legitimate interests — for security logging and abuse prevention (UK GDPR Article 6(1)(f))
• Contract — if you become a paying customer, to deliver the service you have purchased (UK GDPR Article 6(1)(b))

Third parties

We rely on a small number of trusted third parties to run this website. Each acts as a “data processor” on our behalf:

• Google (Google Analytics 4) — website analytics. Data may be processed in the United States under the EU-US Data Privacy Framework.
• Cloudflare — hosting, DNS, and security. Data is processed in Cloudflare’s global edge network.
• Stripe — payment processing. Card data is sent directly to Stripe and never stored on our systems.
• Resend — transactional email delivery for customer notifications.

International transfers

Some of the third parties above (notably Google and Cloudflare) process data outside the United Kingdom. Where this happens, we rely on UK Adequacy Decisions or Standard Contractual Clauses to ensure your data is protected to UK GDPR standards.

How long we keep your information

• Email correspondence: retained for as long as needed to respond, then archived for up to 3 years for reference
• Customer account and billing data: retained for 7 years to meet HMRC record-keeping requirements
• Analytics data: retained for 14 months in Google Analytics, then automatically deleted
• Server logs: retained for 30 days, then automatically purged

Your rights

Under UK GDPR you have the right to:

• Ask for a copy of the personal information we hold about you
• Ask us to correct anything that is wrong
• Ask us to delete your information (where we are not legally required to keep it)
• Object to or restrict how we use your information
• Withdraw your consent at any time (this will not affect anything we did before you withdrew)
• Receive your information in a portable format
• Lodge a complaint with the supervisory authority — see below

To exercise any of these rights, email steve@command-centre.app. We will respond within one calendar month.

Withdrawing cookie consent

To change your cookie choice at any time, clear this site’s data in your browser settings and reload the page — the consent banner will reappear.

Complaints

If you believe we have mishandled your personal data, you can complain to the UK Information Commissioner’s Office (ICO):

Changes to this policy

We will update this page when our practices change. The “last updated” date at the top shows when. Material changes will be flagged on the homepage for a reasonable period.