Privacy notice

Who is responsible for your information?

Paul Maddison trading as Centre One is responsible for customer, order and website information used for its own business purposes.

Belford Street, Horden, Peterlee, Co Durham SR8 4BD

Email: support@centreone.co.uk

For records entered by a customer into a managed Centre One site, the customer normally decides why and how that information is used and acts as controller. Centre One normally acts as its processor to host, secure, back up and support the service.

What information do we collect?

Enquiries may include your name, email address, organisation, area of interest and message. Checkout and subscription records may include your name, organisation, order email, telephone number, billing address, selected plan, price, VAT, consent record, order and invoice references, payment status, renewal dates, licence status and onboarding information.

SumUp handles card entry, card verification and 3-D Secure. Centre One receives payment and checkout identifiers, status, transaction references and a protected recurring-payment token. The token is encrypted at rest and is not a card number.

Why do we use it?

We use information to respond to enquiries, take requested pre-contract steps, process and verify payments, provide subscriptions and licences, provision managed sites, deliver updates and support, prevent fraud and duplicate charges, maintain audit trails, meet tax and accounting duties, enforce contracts and protect our systems.

Our lawful bases are steps requested before a contract and performance of a contract; legal obligations such as tax, accounting and regulatory duties; and legitimate interests in running, securing, improving and supporting Centre One. Reading this notice is acknowledged at checkout, but it is not treated as consent where another lawful basis applies.

How long do we keep it?

General enquiries are normally kept for up to 12 months after the last meaningful contact. Order, invoice, payment and core contract records are normally kept for six years after the relevant financial year or relationship ends where needed for tax, accounting, disputes and audit. Security and operational logs are kept only as long as reasonably needed for those purposes.

Managed customer content follows the customer’s instructions, the service terms and agreed offboarding. Some information may be retained longer where law, fraud prevention, a dispute or security investigation requires it.

Who receives it?

Information may be processed by SumUp for payments; website, application, infrastructure, backup and email providers; Centre One support personnel; and professional advisers or public authorities where necessary. Managed payment confirmation is sent securely from the sales server to the app server to create or extend the correct customer entitlement.

We do not sell personal information or share it for third-party advertising. Where a provider processes information outside the UK, we rely on the provider’s applicable data protection safeguards and contractual arrangements.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict the use of your information, object to processing, or receive a portable copy. Contact us if you want to exercise a right or raise a concern.

You can also complain to the UK Information Commissioner’s Office. Visit ico.org.uk/make-a-complaint for current guidance.

Security and payment information

Centre One uses access controls, encrypted credential and token storage, separate SumUp sandbox and live environments, server-side payment verification, audit records and duplicate-charge protections. No internet service can promise absolute security, so we review controls and respond to suspected incidents proportionately.

Cookies

The public site does not currently use analytics or advertising cookies. Read the cookie notice for details about essential technical cookies.

Changes to this notice

We will update this page if the information we collect or the way we use it changes. The version accepted for an order is recorded with that subscription.