Privacy notice

We process the minimum personal data we need to run our products and keep them safe. We don't sell personal data, ever.

What we collect

Across the Towpath estate (PayCamp, GotAPal, ServicePay, 3 Wee Pages and others) we collect only what each product needs to function — for example: name, email, phone, business name, postcode, payment information processed via Stripe.

Why we collect it

To run the service you're using, take payment where applicable, keep the service secure, and reply to you. Not for advertising, profiling, or data brokering.

Legal basis

Performance of contract for things you've signed up to; legitimate interests for security, fraud prevention, and improving the products; consent where we ask for it directly.

Sharing

With service providers we rely on to operate — Stripe for payments, Resend for transactional email, Cloudflare for delivery and security, Supabase for hosting and databases, Google Analytics for site statistics, and Twilio where a product sends SMS. They process on our instructions under written agreements. We don't share with advertisers.

Retention

As long as you have an account with us, plus any period required by law (e.g. seven years for invoices). You can ask us to delete sooner.

Your rights

Access, correction, deletion, portability, restriction, objection. Email privacy@towpath.digital (or use our contact form) and we'll respond within one calendar month, as UK GDPR requires.

UK GDPR

Towpath Digital Ltd is the data controller for towpath.digital and the connected products listed above. Our UK supervisory authority is the ICO (ico.org.uk), and Towpath Digital Ltd is registered with the ICO under registration reference ZC210106.