Privacy Policy

Last updated: January 2026

Skylon Development LTD ("Company", "we", "us", or "our") operates the Joinery Core application ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal data is:

2. Information We Collect

2.1 Information You Provide

Data Type	Examples	Purpose
Account Information	Name, email address, company name, password	Account creation and authentication
Business Data	Projects, clients, team members, schedules	Providing the Service functionality
Financial Data	Project costs, wages, materials costs	Accounting and reporting features
Payment Information	Card details (processed by Stripe)	Subscription billing
Files and Documents	Uploaded images, PDFs, production sheets	Document storage feature

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, error logs
• Cookies: Session cookies for authentication (see Section 7)

3. How We Use Your Information

We use your information for the following purposes:

• Service Provision: To provide, maintain, and improve the Service
• Account Management: To create and manage your account
• Communication: To send important updates, security alerts, and support messages
• Billing: To process payments and manage subscriptions
• Security: To detect and prevent fraud, abuse, and security incidents
• Legal Compliance: To comply with legal obligations

4. Legal Basis for Processing

Under UK GDPR, we process your data based on:

• Contract: Processing necessary to provide the Service you subscribed to
• Legitimate Interest: Processing for security, fraud prevention, and service improvement
• Legal Obligation: Processing required by law (e.g., tax records)
• Consent: Where you have given explicit consent (e.g., marketing emails)

5. Data Sharing and Third Parties

We may share your data with:

Third Party	Purpose	Data Shared
Supabase	Database hosting and authentication	All application data
Stripe	Payment processing	Payment information only
Resend	Email delivery	Email addresses, notification content

All third-party providers are bound by data processing agreements and comply with UK GDPR requirements.

6. Data Retention

Data Type	Retention Period
Active account data	Duration of subscription
Cancelled account data	30 days after cancellation
Deleted account data	Permanently deleted within 30 days
Backup copies	30 days (rolling)
Payment records	7 years (legal requirement)
Support correspondence	2 years

7. Cookies

We use the following types of cookies:

• Essential Cookies: Required for authentication and security (cannot be disabled)
• Functional Cookies: Remember your preferences and settings

We do not use advertising or tracking cookies. You can manage cookie preferences through your browser settings.

8. Data Security

We implement appropriate security measures including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest
• Secure authentication with password hashing
• Regular security updates and monitoring
• Access controls and audit logs
• Daily backups with secure storage

9. Your Rights Under UK GDPR

How to Exercise Your Rights

You can exercise most rights directly through the Service:

• Export Data: Settings → Your Data → Export All Data
• Delete Account: Settings → Your Data → Delete Account
• Update Information: Settings → Profile

For other requests, contact us at info@joinerycore.com. We will respond within 30 days.

10. International Data Transfers

Your data may be processed in countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the ICO
• Adequacy decisions where applicable

11. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

13. Complaints

If you have concerns about how we handle your data, please contact us first at info@joinerycore.com.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

14. Contact Us

For any questions about this Privacy Policy or our data practices:

← Back to Login