Privacy notice

Last updated: 4 October 2026.

Who operates the service

White Space Signal is operated by Duncan Macduff as a UK sole-trader business. Questions, privacy requests and other enquiries can be submitted through our contact page.

What we collect

We may process your email address, account identifiers, subscription status, billing references, messages you send us, service usage and technical logs needed to operate and secure the service.

Why we process data

We process account and subscription data where it is necessary to provide the service you request. We may process security, abuse-prevention, diagnostics and limited operational analytics for our legitimate interests in running a reliable service, where those interests are not overridden by your rights. We also process information where required to meet legal, tax, accounting or regulatory obligations. Where consent is legally required for an optional activity, we rely on consent.

Payments

Payments are processed by Stripe. White Space Signal does not store your full card number. Stripe supplies payment and subscription identifiers that we use to activate and manage access.

Service providers and international processing

We use service providers including Vercel for hosting, Supabase for database and authentication, Stripe for payments and Resend for operational contact communications. Depending on the provider and service, data may be processed outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we rely on the safeguards made available for the relevant provider and processing arrangement.

How long we keep information

We keep personal data only for as long as it is needed for the purpose for which it was collected, including service delivery, security, support, dispute handling and legal or accounting obligations. Account and subscription records may need to be retained after an account closes where law requires it. Operational logs and routine support data are retained only for as long as reasonably necessary for those purposes.

Your rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct or erase personal data, restrict or object to processing, and receive certain data in a portable form. Where processing is based on consent, you can withdraw that consent without affecting earlier lawful processing.

Complaints

If you have a privacy concern, please contact us first so we can investigate it. You also have the right to complain to the UK Information Commissioner’s Office if you believe your data-protection rights have been infringed.

Contact

Use the White Space Signal contact form for privacy questions, access requests, deletion requests or other data-rights enquiries.