PRIVACY & COOKIES

1. Who controls your data

The data controller for WorkDisputes is Digital Fig Ltd (Company Number: 15889833). If you have a privacy question, email support@workdisputes.co.uk.

2. The data we collect

• Account data: your email address and the information needed to sign you in securely.
• Case data: the facts, dates, notes, and answers you enter into our tools.
• Uploaded documents: files you choose to upload for analysis or drafting support.
• Payment data: payment processing information handled through our payment provider. We do not store full card numbers ourselves.
• Basic technical data: limited technical information needed to keep the service secure and working properly.
• Optional analytics data: if you accept analytics cookies, we collect a privacy-limited page category, referring website domain, browser, operating system, device type, screen size, timezone and pseudonymous device and session identifiers. For a signed-in user, this may include the internal Supabase account ID, but not the account email address.

3. How we use your data

• To run the account, sign-in, dashboard, and saved-work features.
• To generate reports, first drafts, timelines, and other outputs you request.
• To process payments and manage access to paid features.
• To keep the platform secure, prevent misuse, and diagnose service problems.
• If you consent, to measure visits, sign-ups and feature use so we can improve the platform.

AI processing: where you ask the platform to generate a report or draft, relevant text may be processed by third-party AI providers for that purpose. We do not sell your case details for advertising.

We rely on your consent for optional analytics and optional marketing. You can refuse analytics without losing access to the site. Essential processing is used where needed to provide the service, comply with legal duties, and protect the platform and its users.

5. Who we share data with

We use service providers to operate the platform, such as hosting, authentication, payment, storage, optional analytics, and AI processing providers. They process data on our behalf so the service can work. We do not sell your personal data for advertising.

PostHog is our optional analytics processor. Our project uses PostHog Cloud EU. PostHog receives only the limited analytics information described above after you consent.

Approved affiliates provide an account-holder name, UK sort code and account number so we can pay commission by bank transfer. These details are held in a restricted payout table and are available only through authenticated affiliate and administrator routes. Affiliates see masked account details after saving; authorised administrators can view the full details to make a payment. Administrators can also see commission balances, payment references and payment history.

6. Data security and retention

We use reasonable technical and organisational measures to protect data in transit and at rest. No internet service is completely risk-free, but security is treated as an important part of the platform.

We keep personal data only for as long as it is needed for the service, legal compliance, dispute handling, and legitimate record-keeping.

7. Your rights

• Access: you can ask what personal data we hold about you.
• Correction: you can ask us to correct inaccurate information.
• Erasure: you can ask us to delete your account and associated data, subject to any legal retention requirements.
• Objection or restriction: in some situations you can object to, or ask us to limit, certain processing.

To exercise these rights, email support@workdisputes.co.uk.

8. Marketing communications

Service emails, such as account or purchase messages, are different from marketing. Where marketing is used, it should be sent only where there is an appropriate lawful basis and a clear way to opt out.