Privacy policy

Who is responsible

PuckSend is run by [Company legal name], a company registered in [Country of registration] with company number [Company number]. Our registered address is [Registered address]. You can contact us at [Contact email].

[Data protection registration number, if any]

What we collect

• Your email address, when you sign in.
• For each transfer you send: your email address, the email addresses of the people you send to, the optional title and the note you write, the names and sizes of the files, and the times it was sent, expires and was downloaded.
• The files themselves, until the transfer expires or you delete it.
• When someone downloads a file: the time, which file, a short code made from their network address, and a short note of their browser type, used to spot abuse. We do not store the address itself.
• Sign-in details: a sign-in cookie, a short code made from your network address, and a short note of your browser type.
• If you pay: Stripe tells us your plan and the state of your subscription. Stripe collects and keeps your card details. We never see them.
• Messages you send us through the Enterprise form or a report.

Why we use it

We use this information to run PuckSend: to sign you in, deliver your transfers, tell you when they are downloaded, take payment, keep the service secure and stop abuse, and answer you when you write to us.

• [Legal basis for each use, to be confirmed by a lawyer. Expected: contract, legitimate interests and legal obligation.]

Emails we send

We send the emails the service needs: your sign-in code; the link to the people you send files to, which comes from youvegotmail@pucksend.com and is set to reply to you; a confirmation to you with the same link; a note when someone first downloads; and a reminder before a transfer expires if nobody has downloaded it.

Every email to a recipient shows who it is from and has a link to report the transfer.

How long we keep it

• Files are deleted when a transfer expires or when you delete it.
• The record of a transfer (your email, the recipients, the note and the title) is kept for 12 months after the transfer expires, then deleted.
• Your account is kept until you delete it. Deleting your account does not delete records of transfers that are still within the 12 months above.
• [Retention of reports about transfers, to be confirmed.]

Who we share it with

We use Cloudflare to host PuckSend, store files, send email and run the security check on our forms, and Stripe to take payments. They handle information on our behalf. We share information with the police or other authorities only where the law requires it.

[Where information is stored and any transfers outside the UK, to be confirmed.]

Cookies and storage on your device

PuckSend sets one cookie, which keeps you signed in. It is needed for the service to work. We do not use advertising or analytics cookies.

While an upload is running, your browser keeps the names and sizes of the files, and how far it got, on your device so an interrupted upload can carry on. It does not keep the files themselves or any link or code.

Your rights

Under UK data protection law you can ask us to:

• tell you what we hold about you and give you a copy,
• correct anything that is wrong,
• delete your information, or limit how we use it,
• give you your information in a form you can reuse, and
• stop using it where we rely on our own legitimate interests.

Contact and complaints

To use any of these rights, write to [Contact email].

If you are not happy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes

We may update this policy. The date at the top shows when it last changed.