Privacy Notice
Last updated: 5 June 2026
Who we are
Wrenhouse is operated by Simon Long, a sole trader trading as Wrenhouse (the "Service"). For data protection purposes, Simon Long is the data controller of personal data processed through the Service. You can contact us at loudproudenglish@gmail.com.
What we collect and why
| Category | Purpose | Legal basis |
|---|---|---|
| Account data (email, name, login credentials, role) | Create and operate your account, authenticate you | Contract performance |
| Content you create (pieces, prompts, uploads, library) | Provide the Service, store your work, enable sharing you choose | Contract performance |
| Usage and telemetry (pages viewed, features used, errors, device, IP) | Operate, secure, and improve the Service; prevent abuse | Legitimate interests |
| Support messages | Respond to your enquiries | Legitimate interests / contract |
| Marketing communications (only if you opt in) | Send product updates | Consent |
Payment and billing data is collected and processed by Stripe — we do not store full payment card details.
Who we share data with
- Service providers / subprocessors: hosting and backend (Supabase / Lovable Cloud), AI providers used to generate content, analytics, error monitoring, email delivery.
- Stripe for payment processing, subscription management, tax compliance, and invoicing (Managed Payments).
- Professional advisers (e.g. accountants, lawyers) where reasonably necessary.
- Authorities where required by law.
International transfers
Some of our providers are based outside Australia, the UK, or the EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
Retention
We keep account and content data while your account is active. If you delete your account or ask us to delete your data, we will remove or anonymise it within a reasonable period, except where we must retain it to meet legal, accounting, or fraud-prevention obligations.
Your rights
Depending on your jurisdiction, you may have rights to access, rectify, erase, restrict, port, or object to processing of your personal data, and to withdraw consent at any time. UK/EEA users have rights under the GDPR, including the right to complain to a supervisory authority. We aim to respond to requests within one month. To exercise your rights, email loudproudenglish@gmail.com.
Security
We use appropriate technical and organisational measures — including encryption in transit, access controls, and managed authentication — to protect personal data. No system is perfectly secure, so please use a strong unique password.
Cookies
We use strictly necessary cookies and similar storage to keep you signed in and remember your preferences. We use limited analytics to understand how the Service is used. You can control cookies through your browser settings.
Children
The Service is intended for use by teachers and adult learners, and by students under the supervision of a teacher or guardian. We do not knowingly collect personal data from children outside that supervised context.
Changes
We may update this notice; material changes will be highlighted in the Service.