Privacy policy
This explains what personal information we collect when you use Joinery OS or this website, why, and your rights.
Who we are
Joinery OS is run by Boatswain Joinery Limited, a company registered in England and Wales (company number 16081479), of Florida Terrace, Midsomer Norton, Radstock, BA3 2AE, trading as Joinery OS. For the personal information described here, we are the controller. Contact us at [email protected].
Information your business puts into Joinery OS about its own customers (names, addresses, phone numbers and so on) belongs to your business. For that, your business is the controller and we only process it on your behalf. See our data processing agreement.
What we collect
| What | Why | Lawful basis |
|---|---|---|
| Your account: name of your company, your email address, your role, and your password (stored only in scrambled form) | To create your account, let you log in and keep your company's data separate | Contract |
| How the account is used: when people log in, when things were last changed, and counts of customers and jobs | To run the service, manage trials and accounts, and spot problems | Legitimate interests |
| Emails you send us, and our replies | To help you | Legitimate interests |
| Technical information such as IP address and browser type, kept briefly in server logs by our hosting providers | To keep the service secure and working | Legitimate interests |
| Billing contact and invoice details, once you pay for Joinery OS | To take payment and keep tax records | Contract and legal obligation |
We don't use advertising, tracking or analytics cookies, and we don't sell personal information.
Cookies and storage on your device
Joinery OS keeps your sign-in and a working copy of your company's data in your browser's storage while you are logged in. This is needed for the service to work, so we don't ask for consent. Signing out removes it.
Who we share it with
We use these providers to run Joinery OS. They only use the information to provide their service to us.
| Provider | What they do | Where |
|---|---|---|
| Supabase Inc. | Database and sign-in | Data stored in London, UK (Amazon Web Services). Supabase support staff may access it from elsewhere, under UK data transfer safeguards. |
| Cloudflare, Inc. | Delivers this website and protects it from attacks | Worldwide network, under UK data transfer safeguards |
| Our email delivery provider | Sends sign-up, invitation and password emails | Under UK data transfer safeguards |
We may also share information if the law requires it, or with a buyer if Joinery OS is ever sold, who would have to look after it in the same way.
How long we keep it
- Account information: while your account is open, then 90 days, then deleted. Backups are overwritten within a further 30 days.
- Support emails: up to 2 years after the last message.
- Billing records: 6 years, as tax law requires.
Keeping it safe
Information is encrypted as it travels over the internet and is stored with a provider that encrypts it at rest. Each company's data is kept separate by the database's own security rules, and each person only sees what their role allows. We limit who at Joinery OS can reach the database.
Your rights
You can ask us for a copy of your personal information, and ask us to correct it, delete it, restrict how we use it, or object to how we use it. You can also ask for it in a format you can take elsewhere. Email [email protected]. We will reply within one month.
If you are unhappy with how we have handled your information, please tell us. You can also complain to the Information Commissioner's Office at ico.org.uk.
Changes
If we change this policy in a way that matters, we will tell account owners by email.