Privacy Policy — Sorted Name

1. Who we are

Sorted Name ("we", "us", "our") is a service that helps UK residents update their name across banks, insurers, government bodies and other providers after marriage, divorce or deed poll. For the purposes of UK GDPR and the Data Protection Act 2018, we are the data controller for personal data you provide to us.

Contact: privacy@sortedname.app

2. Data we collect

Account data: email, name (old and new), and password (hashed) if you sign in.
Checklist data: the providers you select, progress, reminders, notes and uploaded logo URLs.
Payment data: handled by our payment processor — we never see your card details.
Technical data: IP address, device, browser type, and approximate location, collected via cookies and our hosting provider's logs.
Optional: anything you type into our pre-written email drafts.

We do not sell your personal data. We do not use it to train AI models.

3. Why we use it (lawful basis)

Contract — to deliver the checklist and the features you purchased.
Legitimate interests — to keep the service secure, prevent fraud, and improve the product.
Consent — for optional analytics and marketing cookies (you can withdraw at any time).
Legal obligation — to comply with tax, accounting and law-enforcement requests.

4. Who we share it with

We share data only with processors who help us run the service, including:

Hosting and database providers (in the UK/EU)
Payment processor (Stripe)
Email and AI providers used to draft template emails on your behalf

Each processor is bound by a data processing agreement. Where data leaves the UK/EEA, we rely on UK adequacy regulations or Standard Contractual Clauses.

5. How long we keep it

We keep your checklist and account data while your account is active and for up to 12 months after you delete it, then we erase or anonymise it. Billing records are kept for 6 years to meet UK tax law.

6. Your rights under UK GDPR

You have the right to:

Access a copy of your data
Rectify inaccurate data
Erase your data ("right to be forgotten")
Restrict or object to processing
Port your data to another service
Withdraw consent at any time
Complain to the ICO

To exercise any of these, email privacy@sortedname.app. We'll respond within one month.

7. Security

Data is encrypted in transit (TLS) and at rest. Access is restricted to staff who need it. We run regular backups and security reviews. No system is 100% secure — if we ever suffer a breach affecting your rights, we'll notify you and the ICO within 72 hours.

8. Cookies

See our Cookie Policy for the full list and how to manage your preferences.

9. Children

Sorted Name is not intended for anyone under 18.

10. Changes

We'll post any material change here and, where appropriate, email you. Continued use of the service after changes means you accept the updated policy.