Your information should have a clear job.

What applies today

You can browse the current launch-candidate catalogue without an account. The account screen is not connected to an identity or email provider. Text typed into its email field stays in the open page and is not sent to Contratallia or stored by the product.

If you deliberately add a supplier to My suppliers, the launch-candidate workspace stores the supplier, any renewal date and your requested-update switch against a random browser identifier. It stores no name, email address or account profile; the server stores only a one-way hash of the identifier. The illustrative story uses invented changes and says so on the page. Optional analytics is off unless it is deliberately enabled in a production environment.

Information the service uses or is designed to use

Account details

Your work email, account identifier and sign-in security events when passwordless accounts are activated.

Your supplier workspace

The anonymous workspace uses the suppliers you choose, their product, renewal date, quantity and requested-update switch. It contains no free-text notes or invited people. Those account features remain closed.

Your communication choices

Which supplier updates you ask to receive by email, plus consent, suppression, delivery and opt-out records.

Service and security data

Request times, technical identifiers, authentication events, errors and security records needed to operate and protect the service.

What you send us

Questions, correction requests, source challenges and supplier notices you choose to submit, together with their evidence and handling history.

Why we would use it

Provide what you ask for

Remember the suppliers and renewal information you deliberately save. If accounts and delivery later open, create and secure the account and deliver only a supplier-specific email you requested. The intended basis is taking steps at your request and performing the free service agreement.

Run a safe and reliable service

Prevent abuse, diagnose faults, keep evidence and audit trails, and defend the service. The intended basis is legitimate interests, balanced against your rights.

Respect a choice that needs consent

Use optional storage, analytics or a communication only when consent is the correct basis. You can withdraw that choice without losing the free catalogue.

Meet a legal duty

Keep or disclose limited information where applicable law requires it. Contratallia will not stretch this basis to cover ordinary product use.

Where information comes from

Anonymous workspace choices come directly from the browser action you take. Future account information would come from you or another authorised member. Technical records come from the service and its bound providers. Supplier facts come from the source shown with the record, a licensed or permissioned feed, an authorised supplier submission, or a customer notice supplied for that purpose.

Contratallia is not designed to collect directors, shareholders or other people from public company registers merely because those details are available.

Who receives it

Contratallia does not sell personal information. A live service would share only what is needed with contracted providers for hosting, identity, database, file storage, email, security and support. A workspace owner or administrator can see information belonging to that workspace. Information may also be disclosed where law requires it or to protect legal rights.

The protected launch candidate currently uses Vercel for hosting and Neon for its Preview database. Customer identity, file storage and email remain unbound. The final public notice must state the contracted providers, roles, locations and transfer safeguards that actually apply before public collection begins.

International transfers

Provider locations have not yet been verified. Contratallia will not open live accounts until it knows whether personal information leaves the UK and has recorded the applicable adequacy decision, safeguards and transfer assessment. The final notice will name the route that actually applies.

How long information stays

The unconnected email field is cleared when the page is refreshed or closed. An anonymous workspace remains available for 365 days after the last deliberate workspace change so it can cover an annual supplier-renewal cycle. Reading public pages does not extend that period. Expired workspace state becomes unavailable and is removed by bounded cleanup; choosing Delete my workspace removes it immediately.

A future account needs its own approved retention schedule. Suppression records must last long enough to honour an opt-out; security and audit records only as long as needed to protect the service; and evidence or correction records only as long as their public-record and legal purpose requires.

Your rights

The public rights-request address and identity-checking process are launch requirements. Contratallia will not collect live account data before that route exists.

• Ask for a copy of your personal information and information about how it is used.
• Ask for inaccurate or incomplete information to be corrected.
• Ask for deletion or restricted use where the law gives you that right.
• Object to processing based on legitimate interests or to direct marketing.
• Withdraw consent at any time where consent is the basis.
• Ask for portable account data where the portability right applies.
• Complain to the UK Information Commissioner's Office, as well as contacting Contratallia first if you wish.

Security and automated decisions

The backend already uses exact-origin controls, authenticated internal routes, request limits, security headers and secret redaction. Production identity, storage, incident handling and recovery still need bound-provider proof. No decision with legal or similarly significant effect is made about a person by automated processing.

Children and changes

Contratallia is a business service and is not designed for children. Material changes to this notice will be dated and shown clearly.

Controller and contact

Contratallia is not a company, a sole-trader business, a trading-as identity or a separate legal or commercial operator. For this pre-commercial service, the individual named below is registered only as the data controller and is responsible for decisions about personal information.

A Contratallia-specific privacy email is not active yet. It must be published before live accounts, requested emails or any other personal-data collection opens. If a separate legal or commercial operator is established when monetisation opens, this notice and the Terms must be updated before that operator handles personal data or enters a paid contract.

Data controller

Beshikwashi Ugbe

ICO reference

ZC227052

Correspondence

Flat 171504, PO Box 7169, Poole, BH15 9EL