Privacy

Last updated 3 September 2026

What we hold

• For each order: amount, currency, status, timestamps, the board operator's own reference, and the processor's session and payment identifiers.
• The payer's email address, only if the board operator supplied it so that a receipt can be sent.
• Server logs with IP addresses, kept for 30 days for security and fault-finding.

What we never see

Card numbers, expiry dates and security codes are entered in a secure frame served by our payment processor, Stripe Payments, inside our checkout page, and stored in its vault. They do not pass through our servers. Stripe's own privacy notice governs the data it collects in that frame.

What we do with it

We use order data to collect the payment, to tell the board operator that it is paid, to remit collected amounts, to answer questions about a charge, to handle refunds and disputes, and to meet accounting and tax obligations. We do not sell it, we do not use it for advertising, and we do not contact payers except about their own payment.

Who receives it

The payment processor, for the payment itself. The board operator, who receives the order status and its own reference and nothing else from us. Our hosting and email providers, as processors on our behalf. Authorities, where the law requires it.

How long

Payment records are kept for seven years, as accounting rules require. Logs are kept for 30 days.

Cookies

This site sets one session cookie needed to serve pages. The checkout page loads the payment processor's script, which sets its own cookies for fraud prevention on that page. There are no analytics, tracking pixels or advertising scripts anywhere on this site.

Your rights

You can ask what we hold about an order, ask for a correction, or object to a use, by writing to [email protected]. Quote the receipt number or the order id.