Privacy policy
Last updated 11 October 2026
The short version. Your planner data (transactions, products, forecasts and Shopify exports) stays in your own browser. It is never uploaded to us.
We only hold what we need to sell you a subscription and let you sign in: your email address, your login, and your payment record. We don't use analytics, advertising or tracking of any kind, and we never sell your data.
Who we are
Tally Plans is a sole trader business based in the UK, run by Oliver Green. Our postal address is 2 Crannacombe Cottages. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Tally Plans is the controller of the personal data described here. You can contact us about anything in this policy at oligreen55@icloud.com.
What we collect, and why
We only collect what is necessary to provide the service. Here is everything:
| Data | Why we need it | Legal basis |
|---|---|---|
| Account details: your email address, your password (stored only in scrambled, hashed form, so we cannot read it) and when you last signed in | To create your account, let you sign in to the full planner and reset your password | Contract: we need it to provide the service you paid for |
| Payment details: your name, email, billing country or address, subscription status and payment history. Your full card number is handled by Stripe and is never seen by us. | To take payment, manage your subscription and keep business records | Contract, and legal obligation (tax and accounting records) |
| Emails you send us: your email address and whatever you include in the message | To reply to you and help with your account | Legitimate interests: answering your questions |
| Technical logs: IP address, browser type, the page requested and the time, recorded automatically by our hosting provider | To deliver the website, keep it secure and investigate abuse or faults | Legitimate interests: running a secure website |
What we don't collect
- Your planner data. Everything you enter or import into the free demo or the full planner, including Shopify CSV exports, is saved in your browser's local storage on your own device. It is not sent to us or anyone else. If you clear your browser data, it is gone, so keep your original exports.
- Access to your Shopify store. The planner never connects to Shopify.
- Analytics, advertising or tracking. There are no analytics tools, tracking pixels, advertising cookies or social media plugins on this site.
We don't use your data for marketing. We don't make automated decisions about you or profile you, and we never sell or rent your data.
Who else handles your data
We use a small number of trusted service providers. They process data only to provide their service to us:
| Provider | What they do | Where |
|---|---|---|
| Netlify | Hosts the website, stores customer logins (Netlify Identity) and keeps technical logs | United States |
| Stripe | Processes card payments and subscriptions. Stripe is also an independent controller for fraud prevention and its own legal duties. | UK, EU and United States |
| esm.sh | Delivers the open-source sign-in code used on the login and planner pages. Like any website, it receives your IP address and browser details when the code loads. It receives no account details. | Global content delivery network |
| Apple (iCloud Mail) | Our email provider, for messages you send us | United States and other countries |
Where data is transferred outside the UK, it is protected by an adequacy decision (such as the UK Extension to the EU-US Data Privacy Framework) or by the UK International Data Transfer Addendum and standard contractual clauses that these providers offer.
We may also share data if the law requires it, for example with HMRC or to respond to a valid legal request.
The fonts on this site are hosted by us, so loading a page doesn't send your data to a font provider.
How long we keep it
- Account details: while your subscription is active. We delete your login within 30 days after your subscription ends.
- Payment and invoice records: 6 years from the end of the tax year they relate to, because UK tax law requires us to keep them.
- Emails: up to 2 years after our last conversation, unless they form part of a payment record.
- Technical logs: kept by Netlify for a short period under its own retention policy, usually no more than 30 days.
Keeping it secure
The site is served only over encrypted HTTPS connections. Passwords are hashed and never stored in readable form. Card payments are handled by Stripe, which is certified to PCI DSS Level 1. Access to customer accounts is limited to us.
Your rights
Under UK data protection law you have the right to:
- get a copy of the personal data we hold about you
- have inaccurate data corrected
- have your data deleted, where we no longer need to keep it
- restrict or object to how we use it, including anything we do on the basis of legitimate interests
- receive your data in a portable format
To use any of these rights, email oligreen55@icloud.com. It's free, and we will reply within one month. Because your planner data never leaves your browser, you control it directly: clearing this site's data in your browser deletes it.
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.
Cookies
We only use cookies and browser storage that are strictly necessary for the site to work, such as keeping you signed in. See our cookie policy for the full list.
Children
Tally Plans is a business tool and is not intended for anyone under 18. We don't knowingly collect data from children.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change significantly affects how we use your data, we will email current customers before it takes effect.