Privacy notice

1. Who we are

supporter.one is run by Oakley Digital Ltd (company number 08092409), The Hive, 6 Beaufighter Road, Weston-super-Mare, North Somerset, BS24 8EE. We are the "controller" of the personal information described in this notice, which means we decide how it is used and are responsible for protecting it.

For any question about your information, email support@oakleydigital.co.uk.

2. What we collect

From the forum, when you follow its upgrade link

• Your forum member number, username and the email address on your forum account.

When you buy or manage a membership

• Your email address and, if you give it, your name.
• Details of each purchase: the plan, the price, dates, and the payment references that Stripe gives us (not your card details).
• A record that you agreed to the terms and asked for your membership to start straight away: the wording you saw, the time, and your IP address.
• When you ask for a sign-in link to your account page: the time and your IP address.
• Messages you send us, and our replies.

From Stripe

• Whether a payment succeeded, failed, was refunded or was disputed, and when your plan renews.

We don't collect your postal address, date of birth or card details.

3. How we use it, and why

We don't send marketing emails, and we don't use your information to make automated decisions that have legal or similarly significant effects on you.

4. Who we share it with

We share only what each organisation needs to do its job:

• Stripe processes payments and stores your card details. Stripe acts as a controller for some of the payment information it handles; see Stripe's privacy policy.
• The forum you bought a membership for is told that your account should have paid member status, and until when. It isn't given any payment details.
• Amazon Web Services sends our emails, from its London data centre.
• Our hosting and network providers run the servers and the network service (Cloudflare) that the service uses.
• Our professional advisers, such as our accountant, when they need it.
• Others when the law requires it, for example HM Revenue and Customs or a court. We only give information to the police if they have a court order, or if we judge that sharing it is necessary and proportionate.

Our suppliers may only use your information on our instructions. We never sell your information.

5. Transfers outside the UK

Some of our suppliers, including Stripe and Cloudflare, may process information outside the UK. When they do, it is protected by safeguards approved under UK law, such as UK adequacy regulations or the UK International Data Transfer Agreement.

6. How long we keep it

• Your account details: for as long as you have a membership, and for up to 2 years after your last membership ends, so you can rejoin and see your history.
• Payment and refund records: for 6 years after the end of the financial year they relate to, as UK tax law requires.
• IP addresses: deleted after 12 months.
• Emails to and from us: for up to 2 years after the matter is closed.

If you ask us to delete your information, we remove your name, email address and forum details, and cancel any plan that is still renewing. We keep the payment records that the law requires, with your personal details removed.

7. Cookies

This website doesn't use cookies. When you sign in to your account or buy a membership, the service uses only strictly necessary cookies: one to keep you signed in and one to protect forms from misuse. They expire when you sign out or after a short time.

Stripe's checkout page sets its own cookies to process payments safely and prevent fraud. Our network provider, Cloudflare, may set a security cookie to protect the website from attack. We don't use analytics, advertising or tracking cookies, so we don't ask for cookie consent.

8. Keeping it safe

Every page is served over an encrypted connection. Access to our systems is limited to the people who need it and protected by two-step sign-in. Your card details go only to Stripe, which is certified to the highest payment security standard (PCI DSS Level 1).

9. Your rights

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct anything that is wrong;
• ask us to delete your information, or to restrict how we use it;
• object to us using your information for our legitimate interests; and
• ask for a copy of information you gave us in a format you can take elsewhere.

To use any of these rights, email support@oakleydigital.co.uk. We'll reply within one month. There is normally no charge. We may need to check who you are before we act.

Your forum account itself is managed by the forum. To delete your forum account, use the forum's own tools or contact its administrators. Deleting it doesn't cancel a renewing plan, so please cancel that first, or ask us to.

10. How to complain

If you're unhappy with how we've handled your information, please tell us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk/make-a-complaint or 0303 123 1113.

11. Changes to this notice

We'll update this notice when how we use information changes, and change the date at the top. If a change is important, we'll email members to let them know.