1. Controller and contact
WIN WITH LEE LIMITED is the controller of personal data handled through HookDeck. We are registered in England and Wales under company number 17432233 at 15 Mailing Way, Basingstoke, United Kingdom, RG24 9TH. Contact contactlee@winwithlee.co.uk for privacy enquiries.
2. Data we collect
- Account data, including name, email address, login identifiers and authentication records.
- Billing data, including subscription status, transaction references and limited payment details supplied by Stripe. We do not store full card numbers.
- Content and workspace data, including boards, cards, links, brand profiles, prompts, URLs, transcripts, scripts and AI output.
- Technical and usage data, such as IP address, device/browser information, timestamps, logs, errors, security events and feature interactions.
- Communications, including support messages and feedback.
3. Why and how we use it
We process data to perform our contract by creating your account, saving boards, providing AI features, importing content, processing payments and supporting you. We use legitimate interests to secure, troubleshoot, measure and improve HookDeck, prevent fraud, and understand service performance. We process data to meet legal and accounting duties. Where consent is legally required, you may withdraw it at any time.
4. AI processing and your responsibilities
Content submitted to AI features is sent to service providers acting for us so they can generate requested output. Do not submit special-category data, confidential information you lack authority to share, or third-party personal data unless you have a valid legal basis and have provided required notices.
5. Who receives data
We share data only as needed with infrastructure, database, authentication, AI, analytics, customer support and payment providers; professional advisers; regulators and authorities where legally required; and a buyer in a genuine corporate transaction. Stripe processes payment information under its own privacy terms. Providers are restricted by contract and receive only what they need.
6. International transfers
Some providers may process data outside the United Kingdom. Where required, we use recognised safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved contractual clauses.
7. Retention
We keep account and workspace data while your account is active and for a reasonable period afterwards to support recovery, resolve disputes and meet legal obligations. Billing and tax records are generally retained for up to six years. Security logs may be retained for shorter operational periods. We delete or anonymise data when no longer needed, subject to backups and legal requirements.
8. Security
We use proportionate technical and organisational measures including access controls, encrypted connections and per-user data restrictions. No online system is completely secure. You should use a unique password and protect your account credentials.
9. Your UK data rights
Depending on the circumstances, you may ask for access, correction, erasure, restriction, objection or portability, and may withdraw consent. You can also object to direct marketing at any time. We may need to verify your identity. We normally respond within one month.
You can complain to the UK Information Commissioner’s Office at ico.org.uk, but we would appreciate the opportunity to address your concern first.
10. Children and changes
HookDeck is not intended for anyone under 18 and we do not knowingly collect children’s data. We may update this policy as the service or law changes and will post the revised date, giving additional notice for material changes where appropriate.