Privacy

Who we are

Michael Clayton, operating as Clayton Industries (“we”, “us”, “our”), operates the website and apps covered by this policy. We are the data controller of the personal data you provide to us. If you have any questions, please contact us via our contact form.


What personal data we collect

We only collect personal information when it is necessary to provide our services or when you voluntarily give it to us. This may include:

  • Contact details (name, email address, phone number)
  • Email address linked to your Patreon account, if different from the above

When you register for an account, we collect your name, contact information, login credentials, and any other details you choose to provide to set up and manage your account.


Personal data we collect from third parties (when we act as a data processor)

In some cases, we process data on behalf of another organisation (the “data controller”). This means that:

  • We receive personal data from that organisation for the purposes they determine
  • We only process this personal data in accordance with their written instructions and our contract with them
  • We do not use this data for our own purposes or share it with other third parties except as instructed by the controller or as required by law

If your personal data has been provided to us by another organisation, that organisation is responsible for explaining how and why your data is used and for responding to your data protection rights. We will assist them in handling your requests where required by law or contract.

If you have any questions about how your personal data is processed in this context, please contact the organisation that collected your data in the first place. If you contact us directly, we will help you identify and reach out to the correct organisation where possible.


How we use your personal data (lawful bases)

We use your personal data to:

  • Provide, manage, and improve our services (performance of a contract)
  • Communicate with you about your account or our services (performance of a contract / legitimate interests)
  • Send you service or legal notices (legal obligation)
  • Analyse usage and improve functionality (legitimate interests)
  • Comply with legal obligations

We will always tell you when this information is required and when it is optional.


Retention

We keep your personal data only for as long as is necessary to fulfil the purposes described above, or as required by law. When it is no longer needed, it is securely deleted or anonymised.


How we share your personal data

We do not sell your personal data. We only share personal data in the following circumstances:

  • With our service providers who process data on our behalf under strict contractual controls
  • If required by law or to protect our legal rights
  • In connection with a merger, acquisition, or sale of the business

We may share anonymised or aggregated usage data with selected third parties to help improve our services.

Any data shared will be done so in a secure manner.


Your data protection rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you
  • Have any inaccurate data corrected
  • Have your personal data erased (“right to be forgotten”)
  • Restrict or object to our processing of your data
  • Request transfer of your data to another provider (data portability)
  • Withdraw consent where processing is based on consent

You can exercise these rights at any time by contacting us via our contact form.


Security

We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse.


Our website and apps may link to external sites not operated by us. We are not responsible for the privacy practices of those third-party sites.


Changes to this policy

We may update this policy from time to time. We will notify you of any material changes.


Complaints

You can contact us directly with any questions or complaints via our contact form.

You also have the right to complain to the Information Commissioner’s Office (ICO) regarding any data protection concerns.