Privacy notice

Who we are and our roles

Christopher Adamson trading as Fire Tree Digital is the controller for the account, enquiry, support, security and billing information we decide how to use. Our contact is digital@fire-tree.co.uk, or Unit 60, Basepoint, Yeoford Way, Marsh Barton, Exeter EX2 8LB, United Kingdom.

A business customer normally controls the personal information it puts into its workspace, including staff, contractors, clients, suppliers, jobs and HR records. For that customer content we normally act as a processor. People whose details a customer enters should also read that customer’s own privacy notice.

What information we receive

• Names, business names, email addresses, account identifiers, roles, sign-in details and company membership.
• Workspace content entered by a customer, including contacts, job details, documents, messages, staff, attendance, training and pay information. Some HR records may be sensitive; customers should enter only what is necessary and lawful.
• Enquiries, support correspondence, security events, device and usage information needed to operate and protect the service.
• If paid checkout opens, subscription identifiers, invoices, payment status and billing contact details. Stripe handles payment entry and may process card and fraud information under its own notices.

Why we use it and the legal basis

• Account setup, access, service delivery and billing: contract or steps requested before a contract.
• Security, fraud prevention, fault diagnosis, support and service improvement: legitimate interests, balanced against the interests and rights of affected people.
• Tax, accounting and legal records: legal obligation.
• Optional marketing and non-essential tracking: only when a lawful basis and any required consent or opt-out rules apply. Service messages are separate from marketing.

Where the information comes from

We receive account and enquiry information from you or your organisation. A customer enters its own workspace records. Google may pass sign-in identifiers when you choose Google login. Stripe provides payment and subscription status if billing is enabled. The Base44 platform supplies technical logs and session information needed to operate the app.

Who receives it

Wix.com Ltd operates the Base44 platform that hosts the application. Its published subprocessor directory includes US-based infrastructure, storage and application services. Google is used for optional sign-in; Stripe is used for subscription billing and may act in different data-protection roles for payment services. We may disclose information where the law requires it. A customer’s authorised users see information according to their permissions.

We do not sell customer workspace content. We do not add marketing recipients simply because they signed in.

International transfers

Base44’s published provider list includes processing in the United States and other countries. Base44’s data processing addendum describes its transfer safeguards. We will check the actual providers and applicable UK transfer mechanism before paid onboarding and will provide further details on request. We do not claim that workspace data stays in the UK.

How long information is kept

We keep account and workspace information for the period needed to provide the service and deal with closure, security or legal duties. A business customer remains responsible for choosing its own retention periods for the records it enters. Our sole-trader tax records must generally be kept for at least five years after the 31 January filing deadline for the relevant tax year. Support, security and backup records are kept only for a justified period under a documented retention schedule, which must be finalised before paid launch.

When a customer asks to close its workspace, return, deletion and backup handling are governed by the customer data processing agreement and the verified service process. We will not claim an exact deletion period until the platform process has been tested.

Your rights

Depending on the circumstances you can ask for access, correction, deletion, restriction or portability, object to processing based on legitimate interests, and withdraw consent where it is used. You can object to direct marketing at any time. To exercise a right, email digital@fire-tree.co.uk. If your organisation put your details in a workspace, contact it first; we will assist it as processor.

You can complain to the Information Commissioner’s Office at ico.org.uk. We would welcome the chance to resolve a concern first.

Security, decisions and changes

We use access controls and platform security measures intended to protect information. The service is still undergoing company-isolation and HR/payroll verification before unrelated paying customers can use it. We do not use account information for solely automated decisions that have legal or similarly significant effects. We will update this notice when material processing changes.