Information We Collect

We collect limited information necessary to operate, secure, and improve the service.

Account Information

When you create an account we may collect:

• Name
• Email address
• Organisation name
• Authentication credentials or identity information provided through our authentication provider

Usage Information

We collect technical information about how the service is used, including:

• IP address
• Browser type
• Device and operating system
• Pages and features accessed
• Request timestamps and operational logs

This information helps us maintain service reliability, investigate issues, and improve the product.

Customer Content

Customers may submit website content to 18ways for localisation processing.

This content is processed solely to deliver the service. Customers remain responsible for ensuring they have the necessary rights and permissions to process any content submitted through the platform.

Payment Information

Payments are handled by third-party payment providers. We do not store full payment card details.

How We Use Information

We use collected information to:

• Provide and operate the 18ways service
• Authenticate users and manage accounts
• Process payments and manage subscriptions
• Respond to support requests
• Improve product functionality and reliability
• Detect abuse, fraud, or security incidents

Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

• Contract - processing necessary to provide the service you request
• Legitimate interests - improving, securing, and operating the platform
• Consent - where required for optional cookies or analytics

Data Sharing

We do not sell personal data.

We share limited information with trusted service providers that help operate the platform. These providers act as data processors and only process data on our behalf.

Key Providers

• Stripe - payment processing and subscription management
• Clerk - authentication and account management
• Vercel - infrastructure and hosting
• Supabase - database infrastructure
• Resend - transactional email delivery

A current list of subprocessors is available on our Subprocessors page.

Data Retention

We retain personal data only for as long as necessary to operate the service, comply with legal obligations, or resolve disputes.

Account information may be retained while an account remains active and for a limited period afterwards.

International Transfers

Some service providers may process data outside the United Kingdom or European Economic Area.

Where this occurs, appropriate safeguards are used to protect personal data in accordance with applicable data protection laws.

Your Rights

Depending on your location, you may have rights under data protection laws, including the right to:

• Access personal data we hold about you
• Request correction of inaccurate information
• Request deletion of personal data
• Request restriction of processing
• Receive a copy of your data in a portable format
• Object to certain types of processing

Requests can be made using the contact details below.

Cookies

18ways uses cookies and similar technologies to operate the website and improve the service.

For more details, see our Cookie Policy.

Security

We take reasonable technical and organisational measures to protect personal data.

More information is available on our Security page.

Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised "Last updated" date.

Contact

Privacy enquiries can be sent to privacy@18ways.com.