Legal
Privacy notice
Last updated: 6 October 2026
Draft: some business details below still need filling in.
This notice explains what personal data Margin Hero collects, why, who helps us process it, how long we keep it and your rights. We keep it short because we collect very little.
Who we are
Margin Hero is a trading name of [Company legal name] (company no. [Company number]), registered office [Registered office address]. We are registered with the UK Information Commissioner's Office (ICO), registration [ICO registration number]. For anything about your data, email [Contact email].
What we collect and why
Waitlist. If you join the waitlist we keep your email address, so we can tell you when Margin Hero is ready and send occasional updates about it. Our lawful basis is your consent, which you can withdraw at any time using the unsubscribe link in any email, or by emailing us.
Your account. If you use Margin Hero we keep your login email and password (stored securely by our login provider; we never see your password) and your account settings. Our lawful basis is providing the service you've asked for.
Your business data. The sales reports, products, costs and other figures you add are your business's data. We process them on your behalf only to provide the service, and you stay in control of them.
Your customers. Sales reports from marketplaces often include your buyers' names and addresses. Margin Hero reads each report in your browser and keeps only what's needed for margins: order and product references, dates, quantities and amounts. Buyer names, addresses and contact details are not uploaded or stored, and the report file itself isn't kept.
Who helps us
We use a small number of trusted providers (“sub-processors”), each bound by a data processing agreement:
- Supabase: database and logins. Data is stored in [Supabase project region].
- Vercel: hosts the website and app.
- Resend: stores the waitlist and sends our emails.
Where a provider handles data outside the UK, the transfer is protected by the safeguards UK law requires, such as the UK International Data Transfer Addendum or the UK–US data bridge. We never sell your data or use it for advertising.
Cookies and browser storage
We don't use advertising or analytics cookies. When you log in, a strictly necessary cookie keeps you logged in. The app also remembers a few display choices in your browser (such as whether the menu is collapsed, or how a page is sorted). Neither is used to track you, so no cookie banner is needed. If that ever changes, we'll ask first.
How long we keep it
- Waitlist emails: until you unsubscribe or ask us to delete them.
- Accounts and business data: while your account is open. When you close it, we delete it within [90 days], unless the law requires us to keep something longer.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, ask for it in a portable format, and withdraw consent at any time. Email us and we'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the ICO at ico.org.uk or on 0303 123 1113, though we'd appreciate the chance to put it right first.
Changes
If we change how we use personal data, we'll update this notice and the date at the top, and tell account holders about anything significant.