Privacy Policy

Last updated: 28 May 2026

This Privacy Policy explains how Proxy Scholar Ltd (trading as "CleanabilityIQ"), a company registered in England and Wales ("we", "us", "our"), collects and processes your personal data when you use the CleanabilityIQ platform ("the Service").

1. Controller

Proxy Scholar Ltd is the data controller for personal data collected through the Service. You can reach us at privacy@cleanabilityiq.com.

2. Personal data we collect

• Account data — name, email, password hash, organisation, role.
• Usage data — pages visited, features used, assessments and scans you create, timestamps, device and browser identifiers, IP address.
• Support data — messages you send us and our responses.
• Cookies — strictly necessary cookies for authentication and session management, plus optional analytics cookies (see Section 9).

Payment card data is collected directly by Paddle and is never stored on our systems.

3. Purposes and legal bases

• Creating and securing your account — performance of contract.
• Providing the Service and its features — performance of contract.
• Customer support — performance of contract / legitimate interests.
• Product improvement and analytics — legitimate interests.
• Security, fraud prevention, and abuse detection — legitimate interests / legal obligation.
• Marketing communications — consent (you may withdraw at any time).

4. Sharing

We share personal data only with:

• Subprocessors providing hosting, database, email, and analytics infrastructure (each under written data-processing terms).
• Paddle.com Market Ltd, our Merchant of Record, who processes payments, manages subscriptions, calculates tax, and issues invoices.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

5. International transfers

Some of our subprocessors are located outside the UK / EEA. Where data is transferred, we rely on adequacy decisions or the UK Addendum to the EU Standard Contractual Clauses to ensure appropriate safeguards.

6. Retention

We retain personal data for as long as your account is active and for up to 24 months after closure (or longer where required by law, e.g. tax records). Invoicing data held by Paddle follows Paddle's own retention schedule.

7. Your rights

Under UK GDPR and equivalent laws you have the right to: access, rectify, erase, restrict, port, or object to processing of your personal data, and to withdraw consent at any time. You can also lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority. We aim to respond to rights requests within one month.

8. Security

We use appropriate technical and organisational measures, including encryption in transit, encryption at rest for sensitive fields, role-based access controls, audit logging, and regular reviews.

9. Cookies

We use strictly necessary cookies for authentication. We may also use analytics cookies to understand how the Service is used; you can manage your preferences in your browser settings.

10. Changes

We may update this notice from time to time. Material changes will be communicated by email or in-app at least 14 days before they take effect.

11. Contact

Proxy Scholar Ltd — privacy@cleanabilityiq.com.

See also: Terms of Service · Refund Policy.