Privacy Notice

RightWords is operated by Christian Hood-Boyce (a sole trader) ("we", "us", "our"). We are the data controller for the personal data described in this notice — meaning we decide how and why it is processed.

Details of the sole trader behind RightWords can be requested by email at hoodswagz@gmail.com.

We collect the following categories of personal data:

• Account data — your name, email address and login credentials — to create and secure your account (legal basis: performance of our contract with you).
• Case information — the details, dates and descriptions you enter about your workplace situation — solely to prepare your documents (legal basis: performance of our contract). This can include sensitive information; it is stored separately from your account profile and is never used for marketing.
• Support messages — if you contact us, we keep the conversation so we can help you (legal basis: legitimate interests).
• Usage and device data — basic telemetry such as pages visited, device identifiers and IP address — to keep the service secure, prevent fraud and improve the product (legal basis: legitimate interests; consent where required for non-essential cookies).

Payment card details are collected and processed by Paddle, our Merchant of Record — we never see or store your card number.

• Service providers who help us run the service — hosting, database, authentication and error-monitoring providers — under contracts that protect your data.
• AI processing providers, used to draft your documents from the information you supply, processed transiently and not used to train models.
• Paddle, our Merchant of Record, who processes personal data needed for the sale itself: payments, subscription management, tax compliance, invoicing and refunds.
• Professional advisers (for example accountants or lawyers) where necessary.
• Authorities where we are required to do so by law.

Some of our service providers process data outside the UK/EEA. Where this happens, we rely on appropriate safeguards such as adequacy regulations or standard contractual clauses.

We keep your account and case data for as long as your account is active so you can return to your documents. Support and transaction records are kept for as long as needed for accounting, tax and legal purposes. When data is no longer needed, it is deleted or anonymised. You can ask us to delete your account and case data at any time (see below).

We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and row-level isolation so your case information is only visible to you.

Under UK data protection law you have the right to access your data, have it corrected or erased, restrict or object to processing, receive a portable copy, and withdraw consent where processing is based on consent. We respond to requests within one month. To exercise any of these rights, contact us at the support email shown on your receipt. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

We use essential cookies and similar storage to keep you signed in and make the service work. We do not use advertising or marketing cookies. If we add optional analytics cookies in future, we will ask for your consent first and you can change your preference at any time. You can also control cookies through your browser settings.

If we make material changes to this notice we will update the date above and, where appropriate, notify you by email or in the service.