Privacy policy
Last updated 4 August 2026.
This notice explains what personal data Shinsa collects when you visit shinsa.co.uk or use our software, why we collect it, and how you can exercise your rights.
Who we are
Shinsa is operated from the United Kingdom. For any privacy question, email hello@shinsa.co.uk.
What we collect
- Trade customer data — name, business name, email, phone, service details you enter when applying or onboarding.
- Homeowner enquiry data — answers submitted through your hosted Shinsa journey. This is processed on your behalf — see the data-processing section below.
- Technical data — basic request logs for security and debugging. We don't use tracking cookies for advertising.
Why we use it
- To provide the Shinsa service (contract).
- To send transactional emails you'd expect (contract).
- To meet accounting and legal duties (legal obligation).
- To improve the product and prevent abuse (our legitimate interests).
Retention
We keep customer records for as long as your account is active plus a reasonable period afterwards to meet legal duties. Ask us and we'll confirm what we hold about you.
Your rights
You can ask to access, correct, delete, or export your data, and you can complain to the ICO. Email hello@shinsa.co.uk and we'll respond within one month.
Data processing
Where Shinsa processes personal data on your behalf — for example, homeowner enquiries submitted through your Shinsa journey — you are the controller and we are the processor. The following terms apply.
Scope
- Data categories — homeowner name, contact details, address information, and enquiry answers.
- Purpose — hosting the enquiry journey, generating the structured brief, and delivering it to you by email.
- Duration — for as long as your Shinsa account is active, plus a reasonable period to meet legal duties.
Our commitments as processor
- Process personal data only on your documented instructions.
- Keep personal data confidential and require the same of our sub-processors.
- Apply appropriate technical and organisational security measures.
- Assist you with data-subject requests, DPIAs, and breach notifications.
- Delete or return personal data at the end of the service, unless law requires us to retain it.
Sub-processors
Shinsa relies on the following sub-processors:
- Cloudflare — application hosting and CDN (worldwide, with UK/EU edge presence).
- Lovable Cloud — managed database and storage (EU region).
- Resend — transactional email delivery.
- Stripe — payment processing.
We'll give reasonable notice before adding or replacing a sub-processor.
International transfers
Where personal data is transferred outside the UK, we rely on adequacy decisions or the UK International Data Transfer Addendum with our providers.