Privacy Policy
Last updated: April 9, 2026
1. Who we are
SimpleSupport ("we", "us", "our") provides a customer support helpdesk platform at simplesupport.uk. We act as the data controller for data collected through our website and as a data processor for ticket data submitted by your end-users.
2. Data we collect
Account data
When you register, we collect your email address and a hashed password. We do not store passwords in plain text.
Ticket data
End-users who submit tickets provide their name, email, and message content. This data is stored on behalf of your business.
Usage data
We collect basic server logs (IP address, user agent, timestamps) for security and abuse prevention. We do not use tracking cookies or third-party analytics.
3. How we use your data
- To provide and maintain the SimpleSupport service
- To authenticate your account
- To send transactional emails (ticket notifications, password resets)
- To prevent abuse and ensure platform security
We never sell your data. We never use your data for advertising.
4. Legal basis (GDPR)
We process personal data under the following legal bases:
- Contract performance — to provide the service you signed up for
- Legitimate interest — for security, fraud prevention, and service improvement
- Consent — where explicitly given (e.g., optional marketing emails)
5. Data storage and security
All data is stored in the European Union. We use encryption in transit (TLS) and at rest. Access to production systems is restricted and logged.
6. Data retention
Account data is retained while your account is active. Ticket data is retained according to your plan settings. When you delete your account, all associated data is permanently removed within 30 days.
7. Your rights
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Object to or restrict processing
- Withdraw consent at any time
To exercise any of these rights, contact us.
8. Third-party services
We use a minimal set of third-party services:
- Cloudflare — CDN and DDoS protection (data processing agreement in place)
- Email delivery provider — for transactional notifications only
We do not embed social media trackers, advertising pixels, or third-party analytics.
9. Cookies
We use only essential cookies required for authentication and session management. No tracking cookies, no cookie banner needed.
10. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via email to registered users. The "last updated" date at the top reflects the most recent revision.
11. Contact
For privacy-related inquiries, send us a message.