Privacy Notice

This Privacy Notice explains how Maternity Pay Planner ("we", "us", "our") collects, uses and protects your personal data when you use our website and report service (the "Service"). We are the data controller for personal data collected through the Service.

Personal data we collect

• Calculator inputs — household income, employer pay, due date, hours, savings and similar figures you enter to generate your projection.
• Contact details — your email address, used to send your report link and enable you to sign back in.
• Purchase information — order confirmation details from Paddle (transaction ID, customer ID, purchase environment). We do not receive or store your card details.
• Account data — authentication identifiers when you sign in via magic link.
• Technical data — IP address, device and browser information, and usage/telemetry needed to operate and secure the Service.
• Cookies — see the "Cookies" section below.

How and why we use your data

• Provide the Service — generate your projection, send your report, let you edit inputs and sign back in (legal basis: contract).
• Payments — process and record your purchase via Paddle (legal basis: contract).
• Security and fraud prevention — protect the Service and our users (legal basis: legitimate interests).
• Product improvement and analytics — understand aggregate usage to improve the Service (legal basis: consent, where required).
• Legal obligations — comply with applicable law.

Who we share your data with

• Paddle.com Market Ltd — our Merchant of Record for order processing, payments, tax compliance and invoicing.
• Supabase — database and authentication hosting.
• Lovable — application hosting, email delivery for magic links and report emails.
• Google (Analytics / Tag Manager) — anonymised usage analytics, loaded only where consent has been given.
• Professional advisers — legal or accounting professionals where necessary.
• Authorities — where we are legally required to disclose.

International transfers

Some of our service providers process data outside the UK/EEA. Where they do, we rely on the UK International Data Transfer Agreement, Standard Contractual Clauses or an adequacy decision to safeguard your data.

Data retention

We keep your report and inputs for as long as you retain access (up to 12 months from purchase, or until your due date passes, whichever is longer). We keep purchase records as required by law. We delete or anonymise personal data when it is no longer needed.

Your rights (UK GDPR)

You have the right to access, rectify, erase, restrict processing of, and port your personal data; to object to processing; and to withdraw consent. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk). We will respond to requests within one month.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and Row Level Security on our database, to protect your personal data.

Cookies

We use essential cookies to operate the Service, and — with your consent — analytics cookies (Google Analytics via Google Tag Manager) to understand how the Service is used. You can manage your preferences at any time from the cookie banner or your browser settings.

Contact

For any privacy question or to exercise your rights, please contact us via our contact page.