How we handle personal data

Who is responsible

Faithful Software Solutions Ltd is the controller. We are registered in England and Wales under company number 16682725. Our registered office is 51 Hurst Road, Kennington, Ashford, England, TN24 9RS.

Privacy questions can be sent to hello@faithfulsoftware.dev.

Information we use

We may process the following information:

• Details you submit through website enquiries, resource requests and project intake forms.
• Business correspondence, meeting notes, project records and service-delivery information.
• Account identity and security records when an authorised user signs in to Growth OS.
• Public corporate and business contact information used for relevant business-to-business research.
• Technical records such as IP address, browser data, security logs and your analytics preference.

Growth OS research and outreach

Growth OS helps us identify organisations that may have a relevant software need. Research is limited to public company evidence, public business contact details, professional roles and work email addresses. We record the evidence used, correspondence, delivery events and suppression decisions so that outreach is relevant and stops when requested.

We rely on legitimate interests for proportionate corporate outreach. We consider the likely effect on the recipient, do not use sensitive personal data for targeting and provide a clear way to opt out. Suppression records are retained so an opt-out is respected.

Google sign-in and Gmail

Our private Growth OS requests the openid and email scopes for identity, plus https://www.googleapis.com/auth/gmail.modify for a dedicated company mailbox. Gmail data is used only to create and send founder-approved business email, reconcile sent mail, sync replies and bounces, and stop sequences when required.

OAuth tokens are encrypted. We never sell Google user data, use it for advertising or use it for general-purpose AI training. Access is limited to the application functions described above.

Why we use information

• Contract and pre-contract steps for enquiries, proposals and service delivery.
• Legitimate interests for proportionate corporate outreach, service improvement, fraud prevention and security.
• Consent for newsletters and non-essential analytics.
• Legal obligation and legitimate interests for accounting, compliance, audit and dispute records.

Cookies and analytics

Essential cookies and local storage support security, sign-in and remembering your privacy choice. We load Google Analytics only after you accept analytics. You can reject it without losing access to the site.

Use Cookie settings in the site footer to change your choice and withdraw your consent. If analytics was active, we remove its cookies and reload the page without analytics.

Service providers and transfers

We use selected processors to operate our services:

Vercel

website hosting, deployment, logs and security

Supabase

database, authentication and encrypted application storage

Google

Google Workspace, sign-in, Gmail API and consent-based Google Analytics

Resend

transactional and newsletter email delivery

HubSpot

customer relationship and enquiry management

Some providers may process information outside the UK. Where this happens, we use an adequacy decision or approved contractual safeguards and apply access controls appropriate to the data.

Retention and security

We keep information only for as long as needed for the stated purpose, legal obligations, agreed service records or a live claim. Retention depends on the relationship, record type and risk. Access is restricted, credentials and OAuth tokens are protected, and sensitive operations are logged.

Your rights

Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or an objection to processing. You may withdraw consent at any time. Contact us using the address above and we will respond under applicable UK data-protection law.

You can also complain to the Information Commissioner's Office at ico.org.uk.

Changes to this notice

We will update this page when our processing changes. Material changes will be dated and communicated where appropriate.