// privacy
Privacy Policy
How we handle personal data under the UK GDPR and Data Protection Act 2018.
draft template — not yet reviewed. This policy is a starting point generated from a standard structure. Have it checked and completed by a qualified person, and fill in every [bracketed] placeholder, before you rely on it or take real payments.
1. Controller
Harmony Future Holdings Limited is the controller of personal data processed through this Service. Contact: businessprojectone@proton.me.
2. What we collect
Document details you enter: the information you type into the forms to generate a document. Where possible this stays in your browser and is not sent to our servers to build the document.
Payment data: when you pay, Stripe processes your payment and shares limited transaction data (such as confirmation of payment) with us. We do not receive or store your full card number.
Technical data: basic logs and, if enabled, privacy-friendly analytics (pages visited, device type) to keep the Service secure and improve it.
3. Why we use it (lawful bases)
To provide the Service and process your document (performance of a contract).
To take payment and prevent fraud (contract and legitimate interests).
To keep the Service secure and improve it (legitimate interests).
Where we rely on consent (for example, non-essential cookies), you can withdraw it at any time.
4. Sharing
We use trusted processors to run the Service, including Stripe (payments) and Vercel (hosting). They process data on our instructions. We do not sell your personal data.
5. Retention
We keep payment and transaction records for as long as required by law — in the UK, tax records are generally kept for 6 years. Document details you enter are processed in your browser where possible and are not retained by us beyond what is needed to provide the Service.
6. Your rights
Under UK GDPR you have rights to access, correct, delete, restrict, and object to processing of your personal data, and to data portability. To exercise them, contact us.
You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk. Contact us first if you can: businessprojectone@proton.me.
7. International use
This Service and its documents are designed for use in the United Kingdom. If you access it from elsewhere, you are responsible for compliance with your local laws.