Privacy Policy
This policy explains how Lachlan Brown Group ("we") uses personal data about the people who use DOJO-Touch: venue owners and staff with a login. We are the controller for this data.
Card payment data that passes through the Service on a venue's behalf is covered by our Data Processing Agreement with that venue, not by this policy.
What we collect
- Account details: your name, email address, password (stored only as a secure hash), the venue you belong to and your role.
- Billing details: handled by Stripe. We see the subscription status and card type and last four digits, never the full card number.
- Usage and security logs: sign-in times, IP addresses and actions taken in the portal, used to keep the Service secure and to fix problems.
- Records of accepting these terms: which version you accepted and when.
Why we use it
- To provide the Service under our contract with your venue (contract).
- To bill for the Service and keep financial records (contract; legal obligation).
- To send essential emails: verification, invitations, password resets, alerts about your venue's connection, and the daily summary if your venue has turned it on (contract; legitimate interests).
- To keep the Service secure and working (legitimate interests).
We do not sell your data or use it for advertising.
Who we share it with
- Stripe, for subscription billing.
- Our hosting, email delivery and error-monitoring providers, who process data only on our instructions.
- Dojo and A.K.Microsystems receive data only as needed to process your venue's payments. Their own terms and policies apply.
- Authorities, where the law requires it.
Some providers may process data outside the UK. Where they do, appropriate safeguards are in place, such as the UK International Data Transfer Agreement or an adequacy decision.
How long we keep it
Account data is kept while your venue's account is open and for up to 12 months after it closes. Billing records are kept for 6 years, as UK law requires.
Your rights
You can ask to access, correct or delete your data, object to or restrict how we use it, or receive a copy of it. Email 2hello@sccpro.co.uk". You can also complain to the Information Commissioner's Office (ico.org.uk).