Who we are
ScanPosture™ is a trading name of Bailey & Prosper Holdings Ltd (Company No. 17444004), registered in England & Wales. Registered office: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ.
Data Controller: Bailey & Prosper Holdings Ltd. Contact: contact@scanposture.com
What data we collect
When you contact us, request a demonstration or register interest, we use the information you submit:
- Name, work email address, company and company size
- Role, platform, MSP status, demonstration interests and any message you provide
- Submission date, technical request information and anti-abuse challenge results
Only provide information needed for your enquiry. Do not include passwords, tenant credentials or sensitive personal information in these forms.
For customer service use, account and billing information supports administration. Configuration data assessed in a customer’s Microsoft tenant is processed on that customer’s instructions, subject to the applicable service and data processing agreement. This notice does not replace the customer’s own privacy information.
Why we collect it
We use this information to:
- Respond to your enquiry and arrange a demonstration you request
- Send the confirmation and service communications associated with your request
- Administer accounts, support the service and protect forms against abuse
Legal bases: Our legitimate interests in responding to business enquiries, administering the service and preventing abuse; taking steps at your request before a contract where you are the contracting individual; and legal obligations where applicable. Customer tenant data is processed under the customer’s instructions and lawful basis.
How long we keep it
We keep enquiry records while needed to respond, follow up and resolve the matter. Account and service records follow the applicable customer agreement and retention requirements. Contact us to request deletion or confirm a retention schedule before submitting information with specific deletion requirements. Provider backups, security records and legal holds can have different retention periods from visible account records.
Who we share it with
We do not sell your data. We use the following processors to operate our service:
- Supabase stores demonstration requests and service records. The primary database is configured in London.
- Resend delivers enquiry notifications and confirmation emails, processing recipient details, message content and delivery information.
- Vercel hosts the website and form handlers and processes request metadata and operational logs.
- Cloudflare Turnstile checks form submissions for abuse using challenge and technical request information. Cloudflare also provides website analytics about page visits.
- Our business email service handles enquiry correspondence. Customer billing, where applicable, uses Stripe.
The service provider list is published at /sub-processors.
International processing
A London primary database does not mean all processing stays in the UK. Hosting networks, email delivery and provider support can involve processing or access in other countries. Contact us for the provider terms, data processing agreement and transfer safeguards applicable to your arrangement. Account-specific contracting parties and transfer arrangements require confirmation when arranging customer processing.
Your rights
Under UK GDPR you have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Request erasure where the right applies
- Restrict or object to processing
- Portability, receive your data in a machine-readable format
Rights depend on the circumstances and have exceptions. To make a request, email contact@scanposture.com. We normally respond within one month; permitted extensions can apply to complex requests.
Complaints
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or call 0303 123 1113.
Changes to this policy
We update this policy as processing changes. The date at the top of this page identifies the latest version.