Privacy Notice

Sean Gallop (“we”, “Terrafield”) is the data controller for personal data processed through the Terrafield platform. This notice explains what we collect, why, who we share it with, and the rights you have.

Data we collect and why

• Account data (name, company, email, login credentials) — to create and secure your account. Legal basis: performance of our contract with you.
• Project and manifest content (project details, manifest numbers, disposal destinations, weight tickets, uploaded documents) — to provide the logging and reporting features. Legal basis: contract.
• Support messages — to answer your questions. Legal basis: contract and legitimate interests.
• Usage and device data (pages viewed, feature usage, IP address, browser type, error logs) — for security, fraud prevention, and improving the product. Legal basis: legitimate interests.
• Marketing contact data (email you submit to our early-access form) — to send product updates. Legal basis: consent; you can unsubscribe at any time.

Who we share data with

• Service providers / subprocessors — cloud hosting, database and file storage, and error monitoring, acting on our instructions.
• Paddle, our Merchant of Record, for the sale of our products, subscription management, payments, invoicing, and tax compliance.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law or to protect legal rights.

We do not sell personal data.

Retention

We keep account and project data for as long as your account is active and for up to 12 months after closure, so you can reactivate or export records. Billing records are kept as long as tax and accounting law requires. Data that is no longer needed is deleted or anonymised.

Security

We use appropriate technical and organisational measures, including encryption in transit, encrypted storage, row-level access controls that limit each account to its own records, and private document storage that is not publicly accessible.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, object to processing, and withdraw consent. Where the UK/EU GDPR applies you may also complain to your supervisory authority, and we will respond to requests within one month. If data is transferred outside the UK/EEA we rely on adequacy decisions or Standard Contractual Clauses. To exercise a right, email hello@terrafield.app.

Cookies

We use essential cookies and local browser storage to keep you signed in and to run the checkout. We do not use advertising cookies. You can clear or block cookies in your browser, though signing in will not work without the essential ones.