Template — not legal advice. This page is a starting point. Have a lawyer review and adapt it to your business, location and customers before you rely on it.
Privacy policy
Last updated: [date]
This policy explains how [Business name] ("we") handles personal information in Workline, the customer-management service we use to run our business.
What we collect
- Account details for people who sign in: name, email address and a securely hashed password.
- Client records entered by our team: names, contact details, addresses, notes, appointments, estimates, invoices and payment history.
- Payment information is collected and processed by Stripe on its own pages. We never see or store full card numbers.
- Technical data needed to keep the service secure, such as IP addresses used for sign-in rate limiting and server logs.
How we use it
To provide our services, schedule work, send estimates, invoices and reminders, take payments, keep accounts secure, and meet legal and accounting obligations. [Add your legal bases if you serve people in the EU/UK.]
Who we share it with
Service providers that run Workline for us: hosting and database ([e.g. Render]), email delivery ([e.g. Resend]) and payments ([Stripe]). Each only processes data to provide its service. We do not sell personal information.
Cookies and local storage
Workline uses only strictly necessary cookies: a sign-in session cookie and a cookie remembering which workspace you have open. Your light/dark theme choice is kept in your browser's local storage. There are no advertising or analytics cookies, so no cookie consent banner is shown. [Update this if you add analytics.]
How long we keep it
[State your retention periods, e.g. invoices for the period required by tax law, and client records until you ask us to delete them.]
Your choices and rights
You can ask us to access, correct or delete your information by contacting [contact email]. [Add rights that apply in your jurisdiction, e.g. GDPR or CCPA.]
Contact
[Business name], [address], [contact email].