Legal
Privacy
Who holds your data
Thinkbox Studios (UK) Ltd, company number 17409614, registered office 82A James Carter Road, Mildenhall, IP28 7DE, is the data controller for the personal data described here.
What we hold, and why
Your account. Your email address, the name you choose to display, and when you signed up. We need these to give you an account at all, which is the contract between us.
Your subscription. Which plan you are on, whether it is running, and a reference to your Stripe subscription. We do not hold your card number: Stripe does, and they are the controller for it.
Ordinary server logs. Kept briefly for security and to find faults.
Board members named in the catalogue
PublicPapers lists the names and published roles of board members of the public bodies it covers. That information is already published by those bodies themselves, as part of their duty to be open about who governs them, and we hold it on the basis of legitimate interests: a directory of public governance is of no use if the people governing are anonymous.
We hold names and roles as published. We do not hold personal contact details, home addresses, or anything about a person’s private life. If you are listed and something is wrong, or you believe your particular circumstances mean you should not be listed, write to us and we will look at it properly.
Who else sees it
Supabase hosts the database. Stripe processes payments. Our hosting provider serves the site. Each of them acts on our instructions, and we do not sell your data to anyone or use it for advertising. The security statement lists every supplier that processes personal data for us.
How long we keep it
Your account data for as long as you have an account, and for six years after your last payment where we must keep records for tax. Logs for a few weeks.
Your rights
You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, object to us holding it, or ask for it in a portable form. Write to privacy@publicpapers.co.uk and we will answer within a month.
If we get it wrong you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first.
Cookies
One cookie, to keep you signed in. No analytics, no advertising, and nothing that follows you to other sites, which is why there is no cookie banner asking you to consent to any.