Privacy

For your firm’s account, billing, and messages we send you about the product, Day One Routine Ltd is the controller.

For crew records you put into Calx (names, contact details, card numbers, dates, and photos), your firm is the controller. We process that data only to provide the product to you. Ask us at support@getcalx.co.uk if you need a data processing addendum.

On the marketing site: pages you open, and the cookie choice you make.

If you allow analytics, Google Analytics receives a measurement of that visit. Vercel Analytics counts page views without setting a marketing cookie.

If you join the waitlist, we store the email address you submit.

In the product: the name and email on your Clerk account; firm records you enter, including crew names and contact fields, certificate types, card numbers, expiry dates, notes, and optional card photos; reminder emails we send; and technical logs needed to run and protect the service, such as request times and errors.

We do not sell crew data.

We use account and crew data to provide the register, the Due list, reminder emails, and billing. The lawful basis is the contract with your firm.

We use security logs to keep the service working and to investigate abuse. The lawful basis is our legitimate interest in running a reliable service.

We use analytics and advertising cookies only after you allow them. The lawful basis is consent. You can reject them, and you can change that choice later from Cookies in the footer.

A necessary cookie stores your consent choice. Sign-in cookies on the app keep you logged in. Those are required for the product to work.

Analytics cookies, including Google Analytics, load only if you allow measurement. Marketing cookies load only if you allow marketing. Until you choose, advertising and analytics storage stay denied.

We use these processors to run Calx:

• Clerk, for sign-in and billing
• Stripe, through Clerk Billing, for card payments
• Neon, for the database
• Amazon S3, for card photos
• Resend, for email
• Vercel, for hosting and cookieless page counts
• Google, for Analytics, only after you allow measurement

They process data to provide their service to us. Some of them process data outside the UK. Where that happens, we rely on the transfer terms those providers offer.

Card photos are stored in private storage. They are not on a public web address.

We keep a firm’s records while the account is open. If you ask us to delete the account, we remove the firm’s data from our systems, except where we have to keep a record for tax, accounting, or a legal claim.

Waitlist emails are kept until you ask us to delete them, or until we no longer need them to tell you the product is open.

Consent choices are stored in your browser until you clear them or they expire.

You can ask for a copy of your personal data, a correction, deletion, a restriction, or a portable copy. You can object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time.

Crew members should ask their firm first, because the firm decides what is on the register. We will help the firm respond.

You can complain to the Information Commissioner’s Office at ico.org.uk. We would like the chance to put it right first: support@getcalx.co.uk.

Day One Routine Ltd, 68a High Street, King’s Heath, Birmingham B14 7JZ. Email support@getcalx.co.uk.