Fledge

Legal

Privacy Policy

Last updated: 1 May 2025

1. Who we are

Fledge (“we”, “us”, “our”) operates the website at getfledge.co.uk. We are the data controller for personal data collected through this service. For questions, contact us at hello@getfledge.co.uk.

2. What data we collect

  • Account data — phone number (parents/guardians) used to verify your identity via one-time SMS code.
  • Shop data — shop name, slug, description, icon, and product information you create.
  • Order data — buyer name, shipping address, items purchased, and payment status (processed by Stripe).
  • Usage data — page visits and shop view counts to help shop owners understand their reach.
  • Device data — IP address, browser type, and similar technical information collected automatically.

3. How we use your data

  • To provide, maintain, and improve the Fledge service.
  • To send one-time SMS verification codes for sign-in.
  • To process payments via Stripe (we do not store card details).
  • To show shop owners aggregated statistics about their shop.
  • To comply with legal obligations.

4. Legal basis for processing (UK GDPR)

  • Contract — processing necessary to provide the service you signed up for.
  • Legitimate interests — fraud prevention, security, and service improvement.
  • Consent — optional analytics cookies (you may withdraw at any time).

5. Children's privacy

Fledge shop accounts are created and managed by parents or guardians (aged 18+). Young people may use the shop front end, but we do not knowingly collect personal data directly from children under 13. If you believe we have inadvertently collected such data, contact us immediately.

6. Who we share your data with

  • Stripe — payment processing. Stripe is PCI-DSS compliant.
  • Google Firebase — authentication, database, and hosting infrastructure.
  • Vercel — website hosting and edge delivery.

We do not sell your personal data to third parties.

7. Data retention

We retain account and shop data for as long as your account is active. Order records are kept for 7 years for accounting purposes. You may request deletion at any time (subject to legal retention requirements).

8. Your rights

Under UK GDPR you have the right to: access, rectify, erase, restrict, or port your data, and to object to processing. To exercise any right, email hello@getfledge.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

We use cookies as described in our Cookie Policy.

10. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice on our website.