DRAFT for review. This is a working draft tailored to your setup (Stripe + Supabase + Vercel, UK, subscription with a free trial). Fill in the bracketed placeholders, and — because this is a paid product — have a solicitor or a reputable legal-template service give it a final check before you rely on it. Nothing here is legal advice.
Last updated: [EFFECTIVE DATE]
Clifton Economics ("Clifton Economics", "we", "us", "our") provides an online subscription revision platform for university economics, accounting and finance students at [WEBSITE DOMAIN].
Clifton Economics is operated by [YOUR LEGAL NAME — if sole trader / OR: COMPANY NAME, a company registered in England and Wales under company number COMPANY NUMBER, registered office ADDRESS]. We are the "data controller" responsible for your personal data.
If you have any questions about this policy or about how we handle your data, contact us at [CONTACT EMAIL — e.g. privacy@yourdomain].
We are registered with the UK Information Commissioner's Office (ICO), registration number [ICO REGISTRATION NUMBER — register at ico.org.uk and add this].
We collect only what we need to run your account and the service:
We do not ask for or intentionally collect special-category data (such as health or ethnicity), and the service is intended for adult university-level students.
| What we do | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Create and run your account; give you access to the content you've paid for | To provide the service you signed up for | Performance of a contract |
| Take payment and manage your subscription, trial and renewals | To operate the paid service | Performance of a contract |
| Keep the service secure, prevent fraud and abuse, fix problems | To protect you and us | Legitimate interests |
| Send you service messages (e.g. trial-ending and renewal reminders, receipts, important changes) | To keep you informed about your subscription | Performance of a contract / legitimate interests |
| Send optional marketing (only if you opt in) | To tell you about features or offers | Consent (withdraw any time) |
| Understand overall usage to improve the platform | To improve the service | Legitimate interests (or consent where cookies require it) |
We use strictly necessary cookies to keep you logged in and to run the site securely — these do not require consent. If we later add non-essential cookies (for example analytics), we will ask for your consent through a cookie banner before setting them, and update this policy.
We do not sell your data. We share it only with the service providers ("processors") that make the platform work, under contracts that require them to protect it:
We may also disclose data where we are legally required to (for example to comply with a court order or tax obligations).
International transfers. Some of these providers may process data outside the UK. Where they do, the transfer is protected by appropriate safeguards (such as UK/EU adequacy decisions or the International Data Transfer Agreement / Standard Contractual Clauses).
Under UK data protection law you have the right to: access a copy of your data; have inaccurate data corrected; have your data erased ("right to be forgotten"); restrict or object to certain processing; data portability; and to withdraw consent at any time where we rely on it.
To exercise any of these, email [CONTACT EMAIL]. We will respond within one month.
Complaints. If you have a concern about how we handle your data, please contact us first at [CONTACT EMAIL] — we will acknowledge your complaint within 30 days and work to resolve it. You also have the right to complain to the ICO at any time (ico.org.uk, or 0303 123 1113).
Data is encrypted in transit (HTTPS). Passwords are stored only in hashed form. Your revision content is served from a private storage area accessible only to signed-in subscribers, and database access is protected by row-level security so users can only see their own records. We never store your card details.
The service is intended for university-level students. It is not directed at children under 16, and we do not knowingly collect data from them.
We may update this policy from time to time. If we make material changes we will notify you (for example by email or a notice on the site) and update the "last updated" date above.
[CONTACT EMAIL] · Clifton Economics · [WEBSITE DOMAIN]