Privacy

Who we are

TurboClad is made and sold by STX Insulation Ltd, a company registered in Scotland under company number SC895063, whose registered office is 71 Castlegate, Berwick-upon-Tweed, TD15 1LF, United Kingdom. We are the data controller for everything described here. The way to reach us about any of it is support@turboclad.co.uk.

The app itself

• No accounts and no sign-in. You never tell the app who you are.
• No analytics, no advertising, no tracking pixels, no crash reporting, no third-party SDKs. We do not know how many bends you drew this week or where you were standing when you drew them.
• Everything you enter — pipe sizes, saved jobs, your company name, settings and your licence code — is stored in the app’s own storage on your device. It is not sent to us and we cannot read it.
• Your licence code is checked on the device, by arithmetic built into the app. Nothing goes to a server to validate it. That is why Pro keeps working with no signal.
• TurboClad is a web app, so when you open it with a connection it fetches its own files from our host to stay current. That is an ordinary web request: the host sees what any web server sees — an IP address, a browser type — in short-lived server logs. We build nothing from that.
• Delete the app, or clear its storage, and everything it held is gone. Export a backup from Settings first if you want to keep your jobs.

Buying a licence

This is the only part of TurboClad where we hold anything about you.

• Payment. Checkout runs on Stripe’s own pages. Your card number, expiry and security code go straight to Stripe — card details never touch our servers and we never see them. Stripe tells us the email address you paid with, the amount, and a reference for the payment.
• What we store. One row per order: the date, the Stripe reference, your email address, which plan it was (monthly, annual or lifetime), the amount in pence, the licence code we issued, and a note if the order needed a human to look at it.
• What we do with it. Email you your code, send it again if you lose it, issue your renewal code each time a subscription renews, answer your questions, and keep the books straight. There is no marketing list. We will not email you anything except your codes and replies to your own messages.

Emailing us

If you email support, or use the contact form on this site, we get your name, your email address and whatever you write. The form does nothing clever — it sends us the message so we can reply. We keep the correspondence so we can pick the thread back up later.

Cookies

This website sets no cookies of its own and runs no analytics, so there is no cookie banner to click away. When you go to pay you leave for Stripe’s checkout, which uses its own cookies to run the payment and spot fraud — that is covered by Stripe’s privacy policy.

Who else sees it

We use a handful of suppliers to run the business. They get only what they need:

• Stripe — takes the payment and holds the payment record.
• Resend — sends your licence email, so it handles your email address and your code.
• Supabase — hosts the database the order row sits in.
• Vercel — hosts this website and the code behind it.
• Telegram — a sale sends a one-line alert to the owner’s phone, so a licence email that fails to send gets spotted the same day. That line includes the plan, the amount and your email address.

That is the whole list. We do not sell your data, share it for advertising, or pass it to anyone else — unless we are legally required to, for example by a court or a tax authority. Some of those suppliers are US companies and may process data outside the UK; they do so under the data protection terms set out in their own agreements.

Why we are allowed to hold it

• To perform our contract with you — issuing, re-sending and renewing your licence code.
• Legal obligation — keeping sales records for company and tax purposes.
• Our legitimate interests — answering support emails, spotting a payment that has gone wrong, and dealing with codes that have obviously been shared at scale.

How long we keep it

• Order records — six years from the end of the accounting year they fall in, because UK company and tax rules require it. After that they go.
• Support emails — for as long as they are useful, normally a couple of years, then deleted.
• Stripe’s own payment records — kept by Stripe under their retention rules, not ours.

Your rights

Under UK GDPR you can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything wrong, such as a mistyped email address;
• delete what we hold — though we have to keep the bare sales record for the six years above;
• hand your data over in a portable form, or restrict or object to what we do with it.

Email support@turboclad.co.uk and say what you want. It helps if you write from the address you paid with, or quote your licence code, so we can find you without asking for anything extra. We reply within one month, and there is no charge.

Complaints

If you think we have got this wrong, tell us first — it is one bloke and an inbox, and most things are sorted the same day. If you are still not happy you can complain to the Information Commissioner’s Office, the UK data protection regulator, at ico.org.uk.

Changes

If we change what TurboClad does with data, this page changes in the same breath and the date at the top moves. If the change is a significant one for people who have already bought, we will email them.