Privacy

Smallprint helps venues prepare for and keep records under the Terrorism (Protection of Premises) Act 2025. This page explains what we hold and why, in plain English.

What we hold

• Your account: your email address, used to sign you in with a link.
• Your venue: its name, address, capacity, layout details you type in, and the records you create (procedures, drills, reviews, checks, notes, decisions, photos).
• Your team: the names and job titles you add, or that people enter when they join by QR code, plus their sign-offs and quiz results.
• Photos: only ones you choose to upload. Your browser shrinks each photo and removes hidden location data before it is sent.
• A log of who changed what and when, which cannot be edited.

The free checker runs in your browser. Your answers are not sent to us. If you start a venue afterwards, we keep a copy of the venue type and capacity in your browser for 24 hours to save you typing it.

The launch interest list

If you register your interest, we hold the name, email and any optional details you give (phone, venue, role, size, message), the time you agreed, and a one-way scrambled version of your IP address to spot abuse. We use them only to tell you about Smallprint's launch and founding-price offer, and only if you ticked the box. Unsubscribe from any email, or ask us to delete your entry, at any time. We delete the list within 12 months if you have not become a customer.

Why, and on what basis

To provide the service you asked for (contract), and to keep security and audit records (our legitimate interests). We do not sell your data and we do not use it for advertising.

Who else handles it

Our database, sign-in and photo storage are provided by Supabase; our website is hosted by Vercel. Payments are handled by Stripe, so we never see your card number. Reminder emails, if switched on, are sent through Resend. To place a venue on a map we send only its postcode to postcodes.io, and the map itself is shown by OpenStreetMap when you open it.

How long

While your plan is active. If you cancel, or stop paying, we keep your records for a short grace period (30 days unless we tell you otherwise) so you can download them, then permanently delete your venue records and photos. We email you before this happens. Billing records are kept as the law requires. While your account is open, You can download everything as a file, and ask us to delete your account and data. Some records, such as the audit log, are kept for the life of the account by design.

Your rights

You can ask to see, correct, export or delete your data, and complain to the Information Commissioner's Office (ico.org.uk). Contact: hello@usesmallprint.co.uk.

Staff who sign off by link

Each person gets a private link. It lets them read the procedures, sign and take quizzes. Anyone with the link can do that, so please keep it private. The venue can issue a new one.