Privacy Policy

1. Who we are

SPRT Console ("the Service") is operated by an individual based in the United Kingdom. For the purposes of UK data protection law, the operator is the data controller. If you have any questions about this policy or your personal data, please contact us at hello@calibratedideas.com.

2. What data we collect

We collect and process the following categories of personal data:

• Account data: your email address and password (stored as a secure hash) when you register.
• Usage data: measurement logs, SPRT records, calibration events, and other data you actively enter into the Service.
• Technical data: IP address, browser type, operating system, and access timestamps, collected automatically via server logs.
• Cookie data: session and functional cookies required to operate the Service. See our Cookie Policy for details.

We do not collect payment information, sensitive personal data, or data from third-party sources.

3. How we use your data

We use your data solely to:

• Provide, maintain, and improve the Service;
• Authenticate your account and ensure account isolation;
• Respond to support or technical queries you raise;
• Comply with legal obligations.

We do not use your data for advertising, profiling, or any purpose unrelated to the operation of the Service.

4. Legal basis for processing (UK GDPR)

We process your personal data under the following lawful bases:

• Contract performance: processing necessary to provide the Service you have signed up for.
• Legitimate interests: security logging and technical operation of the platform, balanced against your rights.
• Legal obligation: where processing is required to comply with applicable law.

5. Data sharing and third parties

We do not sell, rent, or trade your personal data. We may share data with:

• Hosting and infrastructure providers who process data on our behalf under appropriate data processing agreements;
• Law enforcement or regulatory authorities where required by applicable UK law.

Any third-party processors we use are bound by contractual obligations consistent with UK GDPR requirements.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, your personal data will be removed within 30 days, except where retention is required by law. Measurement records you have entered are retained as part of the append-only audit log for the duration of your account.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate personal data;
• Request erasure of your personal data (subject to legal obligations);
• Restrict or object to processing;
• Data portability;
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, contact us at hello@calibratedideas.com.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Account data is isolated per user. Passwords are stored using industry-standard hashing. No system is entirely secure, and we cannot guarantee absolute security.

9. Changes to this policy

We may update this policy from time to time. We will indicate the date of the most recent revision at the top of this page. Continued use of the Service after any update constitutes acceptance of the revised policy.

10. Contact

Questions about this policy should be directed to hello@calibratedideas.com.