Privacy notice

Last updated 27 September 2026

This notice is a working draft for the founding-member programme and will be reviewed before general launch.

Who is responsible

Tierline is provided by the company that operates Tierline (details to be published before general launch), the data controller for the personal data described here. Contact us about privacy through the contact form.

What we hold about members

Your email address and password (stored as a secure hash by our authentication provider), your company details, trades and base postcode, the projects, applications, notices and payments you record, your qualification profile and credentials, who you have shared it with, your alerts and email preferences, your plan and billing status, and basic technical logs (such as error reports) needed to keep the service working.

We use this to provide Tierline to you (contract), to keep it secure and improve it (legitimate interests), to bill you (contract) and to meet legal obligations such as accounting records.

Enquiries

If you use the contact form we keep your name, email, company and message so we can reply (legitimate interests, or steps before a contract). We do not add you to a mailing list. Enquiries are deleted 12 months after we last reply.

People named in what you enter

When you record a client contact or email address, you decide what to enter and why. We process it only to provide Tierline to you, for example to print it on a letter you then send yourself. We never contact your clients.

People named in public records

Tierline reads open public data about companies: Companies House records, notices in The Gazette, public contract awards and payment practice reports. These can name sole traders or company officers. We use this information on the basis of legitimate interests (helping businesses check who they trade with and get paid), limit it to business context, show its source, and refresh it from the source so corrections flow through. You can ask us to correct or remove information about you, and we will also point you to the original publisher.

Anonymous payment records

If payment sharing is on for a project, recording a payment adds a record of how that client paid. It is stored against your account so you can correct or remove it, but no one else ever sees it on its own: figures are shown only when at least three different members have reported on the same firm, and the record is deleted with your account.

Who we share data with

We use service providers who process data for us under contract: Supabase (database and authentication, hosted in London), Vercel (web hosting), an email delivery provider for reminder emails if you have them switched on, and Stripe for card payments when you subscribe. We do not sell personal data or use it for advertising.

How long we keep it

Account data is kept while your account is open and deleted within 90 days of closing it. Billing records are kept for six years for tax purposes. Read alerts are deleted after 60 days. Error logs are kept for up to 90 days. Contact-form enquiries are deleted 12 months after we last reply.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to processing based on legitimate interests, or ask us to restrict it. You can also complain to the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to put things right first.

Cookies

See the cookie notice. We use only what is needed to keep you signed in and remember your display choice.