Privacy Policy

1. Who we are

Yourlene ("we", "us", "our") operates the Yourlene platform at yourlene.com and its sub-platforms (community, living, transparency, calculator, family, kids, business, tech). We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR Regulation 2016/679), and the Data Protection Act 2018.

2. Data we collect

• Account data: email address, full name, and optional profile information you provide on registration.
• Financial modelling data: data you enter into calculators and vault tools is stored solely to power your experience. It is never sold, shared, or used for advertising.
• Document vault: documents you upload to the Family Office vault are stored encrypted in private Supabase Storage buckets accessible only by you and any family members you explicitly invite.
• Payment data: payment processing is handled entirely by Stripe. We store only the outcome (entitlement granted / tier set) — never your card number, bank details, or CVV.
• Usage data: we collect minimal, aggregated analytics (page views, session counts) to improve the platform. No cross-site tracking is performed. No third-party advertising pixels are used.

3. How we use your data

• To provide and operate the platform services you sign up for.
• To process payments and grant entitlements for purchased tool suites.
• To send transactional emails (account confirmation, password reset, purchase receipts) via Resend or SendGrid.
• To send optional newsletter communications you have explicitly opted into — you may unsubscribe at any time.
• To comply with legal obligations and enforce our Terms of Service.

4. Legal basis for processing (UK & EU GDPR)

• Contractual necessity (Art. 6(1)(b)): processing your account and payment data to deliver the services you purchase.
• Legitimate interests (Art. 6(1)(f)): aggregated platform analytics to improve the product.
• Consent (Art. 6(1)(a)): marketing newsletters — you may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): where required by applicable UK or EU law.

5. Data retention

We retain your account data for as long as your account is active. Financial vault data and calculator scenarios are retained until you delete them or close your account. Aggregated, anonymised financial snapshot data used for community benchmarks is retained indefinitely as it contains no personal identifiers. Backup copies are purged within 90 days of deletion.

6. Third-party processors

• Supabase (database & auth) — EU data residency options available.
• Stripe (payment processing) — PCI DSS Level 1 certified.
• Vercel (hosting) — GDPR-compliant, EU edge regions available.
• Resend / SendGrid (transactional email) — used only for account and purchase emails.

7. Your rights

Under UK GDPR and EU GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erasure ("right to be forgotten") — request deletion of your account and associated data.
• Restriction of processing in certain circumstances.
• Data portability — export your data in a machine-readable format.
• Object to processing based on legitimate interests.
• Lodge a complaint with the ICO (UK) at ico.org.uk or your national supervisory authority (EU).

To exercise any of these rights, email privacy@yourlene.com. We will respond within 30 days.

8. Cookies

We use only strictly necessary cookies required for authentication (Supabase session cookie) and security. No advertising, tracking, or profiling cookies are set. No consent banner is required for strictly necessary cookies under UK PECR and EU ePrivacy Directive.