Privacy Policy

Last updated: 2026

This is a plain-English starting draft, not a substitute for a solicitor's review. Anything marked like this needs a real value filled in, and it's worth a solicitor confirming this meets UK GDPR requirements in full before launch.

1. Who we are

Tim Young, trading as Young Procurement, is the data controller for PassLevel5 — the person responsible for deciding how and why your personal data is used.

Tim Young, 138 Proctor Road, Norwich, NR6 7PH · tim@youngprocurement.co.uk

2. What we collect and why

Data	Why we collect it
Email address	To create and manage your account, send your login/password-set link, and contact you about your purchase
Password (stored as a secure hash, never in plain text)	To let you log in securely
Payment information	Handled entirely by Stripe — we never see or store your card details ourselves
Login session data (a cookie)	To keep you logged in between visits
Basic usage/error logs	To diagnose problems and keep the platform running reliably

3. Who we share it with

We use a small number of trusted third-party services to run PassLevel5, each of which processes some of your data on our behalf:

Stripe — processes your payment. Stripe's own privacy policy governs how they handle your card and billing details.
Resend — sends account emails (set-password links, welcome emails, password resets) on our behalf.
Railway — hosts the platform and the underlying database.

We do not sell your personal data, and we don't share it with anyone else for their own marketing purposes.

4. How long we keep it

We keep your account data for as long as your account exists, since your purchase gives you lifetime access. If you ask us to delete your account, we'll remove your personal data within a reasonable time, except where we're required to keep certain records (e.g. transaction records) for tax or accounting purposes.

5. Cookies

PassLevel5 uses one essential cookie to keep you logged in. It's necessary for the platform to function and isn't used for advertising or tracking you across other websites.

6. Your rights

Under UK GDPR, you have the right to:

Ask what personal data we hold about you and get a copy of it;
Ask us to correct inaccurate data;
Ask us to delete your data (subject to any legal reason we may need to keep some of it);
Object to or restrict certain uses of your data; and
Complain to the Information Commissioner's Office (ICO) if you think we've handled your data unfairly.

To exercise any of these rights, contact us using the details below.

7. Keeping your data safe

We take reasonable technical steps to protect your data — passwords are stored as secure hashes, not plain text, and access to the platform's systems is restricted. No online service can guarantee perfect security, but we take this seriously.

8. Changes to this policy

We may update this policy from time to time, for example if we start using a new service or the law changes. We'll post the updated version here with a new "last updated" date.

9. Contact

For any question about your data or this policy, get in touch via youngprocurement.co.uk.