Your information, explained plainly.

1. Who this notice covers

PopUsIn is responsible for personal information connected with this public website, our own enquiries, account administration and our direct commercial relationship with customers and suppliers.

Businesses use PopUsIn to run their own work. Where a business adds information about its customers, staff, appointments, documents or other operations, that business may be the organisation responsible for deciding why that information is used. PopUsIn may process it to provide the service. The applicable order, service agreement or data-processing terms set out those roles in more detail.

2. Information we may handle

The information involved depends on how you use PopUsIn. It may include:

• your name, business details, email address, phone number and enquiry history;
• account, profile, role, permission and sign-in information;
• plan, order, invoice, transaction status and service-administration information;
• content a business chooses to add, such as customer, booking, work, website, support or document records;
• messages, support requests, feedback and records of choices or required acknowledgements;
• device, browser, network, security, audit and diagnostic information needed to operate and protect the service; and
• cookie or browser-storage information described in our Cookie notice.

Payment providers may collect payment-card details directly. PopUsIn may receive a payment reference, amount, status and limited transaction information rather than the full card number.

3. Why we use information

We may use personal information to respond to enquiries, set up and administer accounts, provide contracted software or services, support users, process orders, keep records, prevent misuse, investigate faults, improve reliability and meet legal or regulatory requirements.

The legal basis depends on the activity. It may be necessary to take steps at your request or perform a contract; support a legitimate interest such as operating, securing or improving the service; comply with a legal obligation; or rely on consent where a genuine choice is required. If consent applies, you can withdraw it for future use.

We do not use a consent given for a specific booking, form or operational purpose as permission for unrelated marketing.

4. Who information may be shared with

Information may be available to the business and authorised users responsible for the relevant workspace. We may also use carefully selected providers for hosting, databases, authentication, communications, payments, monitoring, support and other infrastructure needed to provide the service.

Information may be shared with an integration you or the relevant business chooses to connect, with professional advisers, or with a regulator, court or public authority where disclosure is lawfully required. We do not sell personal information as a standalone product.

Third-party websites and services have their own notices. A link or integration does not make their privacy practices ours.

5. International processing

Some service providers may process information outside the United Kingdom. Where that happens, we assess the arrangement and use an appropriate transfer mechanism or other safeguard where required. The precise locations can change as infrastructure and chosen integrations change.

6. How long information is kept

We keep information for as long as reasonably needed for the purpose it was collected, including providing the service, maintaining security and audit records, resolving disputes, and meeting accounting or legal requirements. Different records have different retention periods.

Closing an account or deleting a live record may not remove every copy immediately. Limited information may remain in protected backups, logs or records that must be retained, and will be handled according to the relevant retention process.

7. Your choices and rights

Depending on the circumstances, UK data-protection law may give you rights to ask for access, correction, deletion, restriction, objection or transfer of personal information, and to withdraw consent. These rights are not absolute and we may need to verify your identity before acting.

Send a request to hello@popusin.co.uk with enough detail to identify the relevant relationship or account. You may also complain to the UK Information Commissioner's Office. We would appreciate the opportunity to understand and address the concern first.

8. Security and your responsibilities

We use organisational and technical measures intended to protect information, including access controls and tenant-aware permissions. No internet service can promise that every risk is eliminated.

Keep your sign-in details private, use the correct account and permissions, review who has access to your business workspace, and tell us promptly if you suspect unauthorised use. Our Website & platform terms contain the related account rules.

9. Changes and contact

We may update this notice when the platform, our providers or legal requirements change. The date at the top shows the current published version. Material changes may also be highlighted through an appropriate service or account notice.

For privacy questions, email hello@popusin.co.uk or use our contact page.