Privacy Policy

Last updated: 7 March 2026

1. Who We Are

DesignDesk ("we", "our", "us") is a project management platform for interior designers. This policy explains how we handle your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

Account data: Name, email address, studio name, team size (when you sign up or join our waitlist)
Usage data: Pages visited, features used, time spent (anonymised analytics)
Payment data: Processed securely by Stripe. We never store card numbers
Project data: Any content you create within the platform (projects, invoices, mood boards, etc.)

3. How We Use Your Data

To provide and improve the DesignDesk service
To process payments and manage subscriptions
To send product updates and announcements (you can opt out anytime)
To provide customer support
To comply with legal obligations

4. Legal Basis (GDPR)

We process your data under the following legal bases:

Contract: To deliver the service you signed up for
Consent: For marketing communications (opt-in only)
Legitimate interest: For analytics and product improvement

5. Data Storage and Security

Your data is stored on servers within the UK/EEA. We use industry-standard security measures including 256-bit TLS encryption, access controls, and regular security audits. Payment processing is handled by Stripe (PCI DSS Level 1 compliant).

6. Data Sharing

We do not sell your data. We share data only with:

Stripe: Payment processing
Hosting providers: To serve the application
Analytics: Anonymised usage data only

7. Your Rights

Under GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Delete your data ("right to be forgotten")
Export your data in a portable format
Object to processing
Withdraw consent at any time

To exercise any of these rights, email us at hello@designdesk.app.

8. Cookies

We use essential cookies only (session management, authentication). We do not use third-party advertising cookies.

9. Data Retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymised analytics data may be retained indefinitely.

10. Changes to This Policy

We'll notify you of significant changes via email. Minor updates will be reflected by the "last updated" date above.

11. Contact

For privacy inquiries: hello@designdesk.app