Privacy notice

Who we are

RAMS Pal (ramspal.co.uk) is responsible for the personal data described here, as its controller. For anything about your data, email info@ramspal.co.uk.

What we hold

• Your account: your name and email address, from our sign-in provider, Clerk.
• Your company profile: company name, contact name, email, phone, company number, insurer, health and safety policy, and logo.
• What you enter to create documents — job details, the client and site address, emergency contacts, and the names, roles, competencies and card expiry dates of operatives — and the documents made from it.
• Your workers and equipment registers.
• Your payments: what you bought, when, and Stripe's reference for it. Card details are handled by Stripe and never reach us.
• Messages you send through the contact form, and ratings or comments you leave about a document.
• If you use RAMS Pal without an account: a cookie that recognises your browser, and the IP address it was first used from, which we keep to stop automated abuse.
• Only if you accept analytics cookies: how you use the site, recorded by Microsoft Clarity with the content of your documents masked.

Why we use it

• To provide what you asked for: generating, storing and emailing your documents, keeping your registers, taking payment and running your subscription. The legal basis is our contract with you.
• To email you about your account and payments, such as a renewal that failed, and to send the reminders you can switch off in Settings. The basis is our contract, or our legitimate interest in the service working for you.
• To keep the service secure and stop abuse, and to answer you and improve the service, including from ratings and comments. The basis is our legitimate interests.
• To understand how the site is used, through Clarity, and to send product updates if you ask for them. The basis is your consent, which you can withdraw at any time.
• To keep payment records as tax law requires. The basis is a legal obligation.

Who processes it for us

We do not sell personal data or use it for advertising. These providers process it for us, under contract and only to run their part of the service:

• Clerk — sign-in and accounts.
• Stripe — payments and subscriptions.
• Resend — sending email.
• Cloudflare — hosting, the database, and email routing.
• Microsoft Clarity — usage analytics, only with your consent.

Transfers outside the UK

Some of these providers process data in the United States. Where they do, the transfer is protected by safeguards UK law recognises, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Addendum.

How long we keep it

• Your account, profile, registers and documents: until you delete them, or delete your account.
• If you use RAMS Pal without an account and do not come back: deleted after 30 days, unless you have bought a document, in which case we keep it so that you can still reach what you paid for. Create an account at any point and it all moves across.
• Payment records: Stripe keeps them for as long as financial law requires, including after an account is deleted.
• Contact messages: for as long as we need them to deal with what you asked.

Your rights

You can ask for a copy of your data, for it to be corrected or deleted, to restrict or object to how we use it, or to receive it in a portable format — whether or not you have an account. You can delete your account, and everything in it, yourself from Settings. For anything else, email info@ramspal.co.uk.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use essential cookies to keep you signed in, to recognise a browser that bought without an account, and to remember your cookie choice. Analytics cookies are set only if you accept them. The cookie policy has the details.

Changes to this notice

If we change this notice in a way that matters, we will say so on the site before the change applies.