Privacy Policy

Last updated: 7 June 2026

1. Who we are

Ballyance is operated by Chris McAnallen ("we", "us", "our"). If you have questions about this policy, contact us at chris@ballyance.com.

2. What data we collect and why

Account data

When you create a Ballyance account, we collect your name, email address, business name, and password (stored as a hash by Supabase). We need this data to provide you with the service. Our legal basis is performance of a contract.

Customer data you enter

If you use Ballyance to log your customers and orders, that data (customer names, email addresses, phone numbers, social handles, order details) is stored on your behalf. We act as your data processor and process it only on your instructions. You are the data controller for your customers' data — see our Terms of Service for your obligations.

3. How we store and protect your data

All data is stored on Supabase, hosted in the European Union. Data is encrypted in transit (HTTPS) and at rest. We use Row-Level Security (RLS) to ensure your data is isolated from other users of the platform.

4. Who we share your data with

We share your data only with:

  • Supabase (EU-hosted) — database and authentication provider
  • Vercel — application hosting, content delivery, and cookieless page-view analytics (page URL, referrer, country). No personal data is included in these analytics events.

We do not share your data with any other third parties, use it for advertising, or sell it.

5. Cookies and analytics

We use strictly necessary session cookies to keep you logged in. These are set automatically by Supabase as part of the authentication process. No consent is required for these cookies as they are essential to the service.

We do not use tracking or advertising cookies. We do collect cookieless, anonymised page-view analytics via Vercel Analytics (page URL, referrer, country, device type) to understand how the service is used and improve it. No personal data is sent to Vercel as part of this analytics collection.

6. How long we keep your data

We retain your account and customer data until you delete your account. You can delete your account at any time in Settings.

Financial records (orders) may be retained for up to 7 years as required by HMRC record-keeping obligations, after which they are permanently deleted.

7. Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate data — update your details in Settings
  • Erasure — delete your account and all associated data in Settings
  • Data portability — export your data as CSV from the Orders and Reports pages
  • Restriction of processing in certain circumstances
  • Object to processing based on legitimate interests

To exercise any right not covered by in-app features, email us at chris@ballyance.com. We will respond within one month.

8. Children

Ballyance is not directed at individuals under 18. If you believe a child has created an account, please contact us so we can remove it.

9. Changes to this policy

We may update this policy from time to time. Continued use of Ballyance after changes are posted constitutes acceptance. We will update the "Last updated" date above when changes are made.

10. Complaints

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.