Privacy Policy
1. Who we are
CaskAid is provided by Josef Bateman, a sole trader trading as CaskAid, of 3 Greenbank Crescent, Marple, Stockport, SK6 7PB, United Kingdom. For the personal information described in this policy, we are the “controller” under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Contact us about privacy at [email protected].
2. What we collect
- Account details: your email address, your password (stored securely as a scrambled “hash” that nobody can read, including us), your name as it appears on the board, and which pubs you belong to.
- Pub information you enter: casks, lines, cellar temperatures, cleaning and airing logs, notes, events, articles and, if you use them, staff training records (staff names and skill levels). Much of this isn't personal information, but names in logs and training records are.
- Activity records: a log of actions taken in the app (for example “Sam logged a temperature”) and when people last used it, so pubs can see who did what.
- Usage information: which pages and features of CaskAid are opened, when, and the general type of device and browser (for example “Phone · Safari”), plus whether someone currently has the app open. We use this to understand how CaskAid is used and to improve it. It's kept for up to 13 months, and it doesn't involve cookies or any other storage on your device.
- Billing information: your plan, subscription status and invoices. Card details are collected and held by Stripe, not by us.
- Messages: anything you send us, such as feedback in the app or emails to [email protected].
- Technical information: basic information your browser sends when you use the site, such as your IP address and browser type. Our providers use this for security and to keep the service running.
3. Why we use it, and our legal basis
- To provide CaskAid (creating your account, signing you in, storing and showing your pub's board, sending sign-in and password emails). Our basis is performing our contract with you.
- To take payment and keep financial records. Our basis is contract and our legal obligations (for example, keeping tax records).
- To keep CaskAid secure, fix problems and improve it (for example, understanding which features are used). Our basis is our legitimate interests in running a reliable, secure service.
- To contact you about your account, for example about trial reminders, payment problems or important changes. Our basis is contract and legitimate interests.
We don't send marketing emails unless you've asked for them, and you can opt out at any time.
4. Information about pub staff
When a pub adds information about its team, such as staff names in the training grid or activity logs, the pub decides what's recorded and why, and we process it on the pub's behalf. Pubs should only record what they need and let their staff know CaskAid is used. Staff can contact their pub, or us, about their information.
5. Who helps us run CaskAid
We use a small number of trusted providers, who only process information on our instructions:
- Supabase stores the database and handles sign-ins. Data is held in London, UK.
- Stripe handles payments and subscriptions.
- Resend sends sign-in and account emails. It operates from the EU (Ireland).
- Cloudflare hosts the website, manages the caskaid.uk domain and forwards emails sent to our @caskaid.uk addresses.
Some of these providers may process information outside the UK, for example in the EU or the USA. Where that happens, it's protected by safeguards approved under UK law, such as the UK International Data Transfer Addendum or the UK–US data bridge.
We don't sell or rent personal information to anyone, and we don't share it with advertisers.
6. How long we keep it
- Account and pub information is kept while the account is active. If an account is closed, we delete it within 90 days.
- Billing records are kept for 6 years, as required for tax purposes.
- Usage information is kept for up to 13 months, then deleted automatically.
- Emails and feedback are kept for as long as needed to deal with them, and reviewed regularly.
7. Cookies and similar storage
CaskAid only uses essential storage in your browser: to keep you signed in, remember which pub and name you're using on a shared device, and let the app work offline. We don't use advertising or tracking cookies, so there's no cookie banner.
8. Keeping it safe
Information is sent over encrypted connections (HTTPS). Each pub's data is kept separate using database security rules, so one pub can never see another's. Passwords are never stored in readable form. No system is perfectly secure, but we take reasonable steps to protect your information and will tell you promptly if a breach affects you.
9. Your rights
You have the right to:
- ask for a copy of your personal information
- ask us to correct anything that's wrong
- ask us to delete your information
- object to, or ask us to limit, how we use it
- ask for your information in a format you can take elsewhere
Email [email protected] to use any of these rights. We'll respond within one month. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put things right first.
10. Children
CaskAid is a business tool for licensed premises and isn't intended for anyone under 18.
11. Changes to this policy
If we make significant changes, we'll let account owners know by email or in the app. The date at the top shows when this policy was last updated.