Privacy Policy

1. Introduction

CH Watch Ltd ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Full name
• Email address
• Company name
• Payment information (processed securely by our payment provider)

2.2 Usage Information

We automatically collect:

• Companies you monitor
• Alert preferences and settings
• Service usage statistics
• IP addresses and browser information

2.3 Analytics Data

We use PostHog, a privacy-focused analytics platform, to understand how users interact with our website. PostHog collects:

• Page views and navigation patterns
• Button clicks and interactions
• Device type and browser information
• General location (country/city level, not precise location)

All analytics data is stored on EU-based servers and is processed in accordance with GDPR. We do not track individual users across different websites. Analytics data is anonymized and aggregated for identified users only.

2.4 Integration Data

If you connect Slack or other third-party services, we store the necessary credentials and webhook URLs to deliver alerts to your chosen platforms.

3. How We Use Your Information

We use your information to:

• Provide and maintain our service
• Send you alerts about Companies House filings
• Process payments and manage subscriptions
• Communicate with you about service updates
• Improve and optimize our service
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Legal Basis for Processing

Under GDPR, we process your data based on:

• Contract: To provide the service you've subscribed to
• Legitimate Interest: To improve our service and prevent fraud
• Consent: For marketing communications (you can opt out anytime)
• Legal Obligation: To comply with tax and financial regulations

5. Data Sharing

We do not sell your personal information. We share data only with:

• Service Providers: Payment processors (Stripe), authentication services (Clerk), hosting providers (Vercel, Render)
• Analytics Provider: PostHog (EU-based, GDPR-compliant) for website analytics
• Companies House: We access public data from their API
• Your Integrations: Slack, email, or other platforms you connect
• Legal Requirements: When required by law or to protect our rights

6. Data Storage and Security

We store your data on secure servers within the European Union. We implement:

• Encryption in transit (TLS/SSL) and at rest
• Regular security audits and updates
• Access controls and authentication
• Backup and disaster recovery procedures

7. Data Retention

We retain your personal data for as long as your account is active, plus 6 years for financial records (as required by UK law). You can request deletion of your data at any time, subject to legal retention requirements.

8. Your Rights

Under GDPR and UK Data Protection law, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Opt out of marketing communications

To exercise these rights, contact us at hello@chwatch.co.uk

9. Cookies and Tracking

We use cookies for the following purposes:

• Essential Cookies: Required to maintain your session and authenticate your account
• Analytics Cookies: PostHog uses cookies to understand user behavior and improve our service. These are first-party cookies stored on EU servers.

We do not use third-party advertising or cross-site tracking cookies. You can disable cookies in your browser settings, but this may affect service functionality. To opt out of analytics tracking specifically, you can enable "Do Not Track" in your browser or contact us.

10. Third-Party Links

Our service includes links to Companies House and other external websites. We are not responsible for the privacy practices of these sites. Please review their privacy policies.

11. Children's Privacy

Our service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the service. Your continued use constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or to exercise your rights, contact:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have mishandled your personal data.