Privacy policy
Last updated: 2 May 2026
This policy explains what data GetASub collects, why, who we share it with, and how to exercise your rights. We've written it in plain English. Anything in legalese is because UK GDPR requires that exact language.
Who we are
GetASub is a trading name of SIMPSON’S VENTURES LTD, a company registered in England and Wales (company number 17169404). Registered office: 61 Bridge Street, Kington, HR5 3DJ.
For data-protection purposes we are the controller of personal data we collect about you directly (e.g. when you sign up or contact us). When you use the GetASub product to manage your own sub-contractor partners, we are the processor and you are the controller of that data.
Contact: hello@getasub.co.uk
What data we collect
When you visit getasub.co.uk
- An essential session cookie for the live demo (so you stay signed in while clicking around).
- Standard server logs (IP address, browser type, pages visited) for security and abuse prevention.
- We do not use third-party analytics or advertising trackers on this site.
When you sign up as a customer
- Your name, work email, company name, and the brand assets (logo, colours) you provide.
- Payment is handled by Direct Debit via GoCardless — we never see your bank account number or sort code. We only see that a payment has succeeded or failed.
When you use the product
- The job requests, partner accounts, responses and award decisions you create. This data belongs to you — we hold it on your behalf so the platform works.
- Login activity (timestamps, IP) for security.
Lawful basis
- Contract — most processing is necessary to provide the service you've bought.
- Legitimate interests — security logging, fraud prevention, responding to your enquiries.
- Legal obligation — keeping financial records as required by HMRC.
Who we share it with
We use a small number of sub-processors to run the service. Each is contractually bound to protect your data:
- Netlify, Inc. — hosting and storage (UK/EU regions). Privacy.
- GoCardless Ltd — UK Direct Debit billing. Privacy.
- FormSubmit — contact-form relay (forwards messages from getasub.co.uk to our hello@ inbox).
We do not sell your data, and we do not share it with advertisers or data brokers.
Where it's stored
Your data is stored on Netlify infrastructure in the UK and EU. We do not transfer personal data outside the UK / EEA without an adequacy decision or appropriate safeguards in place.
How long we keep it
- Active customers: for as long as your subscription is active.
- After cancellation: 30 days, so you can reactivate without losing data. After that we delete it (or anonymise where required for legal records).
- Demo data: anyone using the public sales demo is sharing a workspace. We may reset it periodically to keep it usable for the next visitor.
- Financial records: 6 years, as required by UK tax law.
- Server logs: 30 days.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct it if it's wrong
- Delete it ("right to be forgotten")
- Restrict or object to how we use it
- Receive a portable copy
- Withdraw consent (where consent is the lawful basis)
- Complain to the Information Commissioner's Office at ico.org.uk
To exercise any of these, email hello@getasub.co.uk. We'll respond within one calendar month.
Cookies
We use one essential cookie: a session token so you stay signed in while using the demo or the product. We don't use tracking, analytics or advertising cookies.
If we add analytics later (e.g. a privacy-friendly tool like Plausible), we'll update this policy and make sure it doesn't track you across other sites.
Changes to this policy
If we make material changes we'll update the date at the top and, if you're a customer, email you to let you know.
Contact
Questions about this policy or your data: hello@getasub.co.uk
SIMPSON’S VENTURES LTD · 61 Bridge Street, Kington, HR5 3DJ · Company no. 17169404