Privacy Policy

1. Who we are

EverLedge is a trading style of Poppin Brands Limited, a company registered in England and Wales. When this policy refers to "EverLedge", "we", "us" or "our", it means Poppin Brands Limited acting under the EverLedge brand.

We are the data controller for the personal information you provide when using EverLedge. Our contact address for privacy matters is privacy@everledge.co.uk.

2. What information we collect

We collect information you give us directly when you use EverLedge:

• Account information — your name and email address when you register.
• Estate records — assets, liabilities, lifetime gifts (including recipients, values and dates), and executor details you choose to record.
• Documents — files you upload to the Documents vault (Professional plan only).
• Billing information — if you subscribe to Professional, your payment is processed by Stripe. We receive only a tokenised reference and your subscription status — we never see your full card details.
• Usage data — basic technical information such as your IP address, browser type, and pages visited, collected automatically when you use the service.

3. How we use your information

We do not use your estate data for any purpose other than operating the service for you. We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Executor data

When you add an executor to EverLedge, you are recording a third party's personal details (name, email, phone). By adding an executor, you confirm that:

• You have obtained the executor's explicit consent to record their details on EverLedge for the purpose of estate administration.
• You have informed them that EverLedge may send them an access link to view estate information you have chosen to share.

Executors who receive an access link can view the estate summary you have shared with them. They do not need to create an EverLedge account to do so. If an executor wishes to request deletion of their data, they should contact you (the account holder) or email us at privacy@everledge.co.uk.

5. Who we share your data with

We use a small number of trusted third-party services to operate EverLedge:

• Supabase — our database and file storage provider. Your estate data and uploaded documents are stored on Supabase infrastructure hosted within the European Economic Area.
• Stripe — payment processing. Stripe is certified to PCI DSS Level 1. Their privacy policy is available at stripe.com/gb/privacy.
• Vercel — our hosting provider. Serves the EverLedge web application.

We do not share your personal data with any other third parties except where required by law or to protect the rights and safety of our users.

6. How long we keep your data

We keep your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons (for example, billing records, which we retain for 7 years in line with HMRC requirements).

7. Your rights

Under UK GDPR, you have the following rights:

• Right to access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can correct inaccurate data directly in your account settings, or ask us to do so.
• Right to erasure — you can request that we delete your personal data.
• Right to restriction — you can ask us to restrict how we process your data in certain circumstances.
• Right to data portability — you can request your data in a machine-readable format.
• Right to object — you can object to processing based on legitimate interests.

To exercise any of these rights, email privacy@everledge.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We take the security of your data seriously. EverLedge uses row-level security to ensure only you — and people you explicitly share access with — can see your records. Data is encrypted in transit (TLS) and at rest. We regularly review our security practices.

No method of transmission over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee absolute security.

9. Cookies

We use a small number of cookies to operate the service. See our Cookie Policy for full details.

10. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or by displaying a notice in the app. The date at the top of this page shows when it was last updated.

11. Contact us

If you have any questions about this privacy policy or how we handle your data, please contact us at privacy@everledge.co.uk.

EverLedge is a trading style of Poppin Brands Limited, registered in England and Wales.