This Privacy Policy explains how Hyper Mode Ltd (“we”, “us”, “our”), trading as PermitDesk, collects, uses, and protects personal data when you use our website at permitdesk.io and the PermitDesk application at app.permitdesk.io (together, the “Service”).
We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Hyper Mode Ltd is the data controller for personal data collected through the Service.
Registered in England & Wales.
Contact: support@permitdesk.io
Account data — when you create an account, we collect your email address and, optionally, your first and last name.
Organisation data — the name of your organisation, companies, and sites you create within PermitDesk.
Permit data — the content of permits you create, including job descriptions, hazard assessments, control measures, personnel names, locations, and timestamps. This may include personal data about third parties (e.g. permit holders and contractors) that you enter.
Usage data — we collect basic usage information (pages visited, features used, error logs) to operate and improve the Service.
Billing data — payment is processed by Stripe. We do not store card numbers or full payment details. We receive billing metadata (subscription status, plan, invoices) from Stripe.
Communications — if you contact us by email or subscribe to our newsletter, we store your email address and message content.
We do not use your data to train AI models, and we do not sell or share your personal data with third parties for marketing purposes.
Your data is stored in the European Union (Ireland) using Supabase (PostgreSQL database and file storage). No personal data is transferred outside the UK or EU/EEA except as described below.
We use the following sub-processors:
We retain your account and permit data for as long as your account is active. If you delete your account, your personal data is deleted within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g. billing records are retained for 7 years as required by HMRC).
Permit records form part of your compliance documentation. We recommend you export any permits you wish to retain before deleting your account.
Under UK GDPR, you have the right to:
To exercise any of these rights, email us at support@permitdesk.io. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).
PermitDesk uses cookies strictly necessary for the Service to function — specifically, session cookies to keep you logged in. We do not use tracking cookies or advertising cookies.
The marketing site (permitdesk.io) does not use cookies beyond those set by your browser for normal page loading.
We apply industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level security on all database tables, and service-role key access controls. We conduct regular dependency updates and security reviews.
No method of transmission over the internet is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the ICO as required by UK GDPR.
PermitDesk is intended for business use by adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The “Last updated” date at the top of this page indicates when the policy was last revised. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.
For any privacy-related questions or to exercise your rights, please contact:
Hyper Mode Ltd
Email: support@permitdesk.io