Privacy Policy
1. Who We Are
SIMPOL Staging ("we", "us", "our") is operated by Paul Inglis, trading as SIMPOL Staging, and provides professional tools for live events and theatre productions, accessible at simpol.app. Our contact email is apps@simpol.co.uk.
We are based in Scotland, United Kingdom.
2. Data We Collect
Not all SIMPOL apps collect the same data — some are web-based tools, others are fully offline native mobile apps. Depending on which app you use, we may collect:
- Account information — for apps that offer sign-in (e.g. via Google OAuth), we receive your name, email address, and profile picture from your account provider. Apps that don't offer accounts (e.g. PocketCue) never collect this.
- Usage data — anonymous or aggregated information about how an app is used (e.g. features accessed, session duration), for apps that include this capability. We don't currently collect usage analytics or crash reports in every app, but we reserve the right to add privacy-respecting analytics or crash reporting to any app in future, with this policy updated to reflect it.
- Show / production data — timing data, cue lists, and other content you enter into our apps. This is stored locally on your device or in your browser, or, where cloud sync is available, in your account.
- Device permissions — some apps request device permissions to do their job: for example, camera access to scan a QR code (processed on your device only, never stored or transmitted), or local network / nearby-device access to discover other instances of the same app on your own WiFi network. These permissions are used only for the stated purpose and never to identify or track you.
- Technical data — for our web-based apps and this website, we (or our hosting infrastructure) may see browser type, device type, and approximate location (country level). Fully offline native apps send us no technical data at all — see below.
3. How We Use Your Data
- To provide and improve our apps and services.
- To authenticate you and protect your account.
- To send important service notifications (e.g. security alerts).
- To comply with our legal obligations.
We do not sell your personal data to third parties.
We do not use your data for advertising or marketing to third parties.
4. Legal Basis for Processing
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For users accessing our services from within the European Economic Area (EEA), we also comply with the EU General Data Protection Regulation (EU GDPR).
Our lawful bases for processing are:
- Contract — to deliver the service you have signed up for.
- Legitimate interests — to improve our apps and prevent fraud.
- Consent — where you have explicitly opted in (e.g. optional notifications).
- Legal obligation — where required by applicable law.
5. Google OAuth & Third-Party Sign-In
When you choose to sign in with Google, you are redirected to Google's sign-in page. We only request the minimum scopes necessary to identify you (your name, email address, and profile photo). We do not access your Gmail, Google Drive, Calendar, or any other Google service without your explicit permission.
Your use of Google Sign-In is also governed by Google's Privacy Policy.
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
Show and production data you create is yours. You can export or delete it at any time within the app.
7. Your Rights
Under UK GDPR (and EU GDPR where applicable), you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data ("right to be forgotten").
- Restriction — ask us to limit how we process your data.
- Portability — request your data in a machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — where processing is based on your consent, you may withdraw it at any time.
To exercise any of these rights, email us at apps@simpol.co.uk. We will respond within 30 days.
8. Supervisory Authorities
If you are based in the United Kingdom and have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).
If you are based in an EU/EEA country, you may also lodge a complaint with your local data protection authority.
9. Cookies & Local Storage
Our web apps use browser local storage and session storage to save your preferences and session state. Our native mobile apps use on-device storage for the same purpose (e.g. saved settings, cue lists, session logs) — this data stays on your device and is never synced to us unless the app specifically offers cloud sync. We do not currently use advertising or tracking cookies.
10. Security
We use industry-standard security measures including HTTPS/TLS encryption, Content Security Policy headers, and secure authentication flows. No system is perfectly secure; please contact us immediately if you believe your account has been compromised.
11. Children's Privacy
Our services are not directed at children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us.
12. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by posting a notice in the app or sending an email to your registered address. The "Last updated" date at the top of this page always reflects the current version.
13. Contact
Questions or concerns about this policy? Contact us at apps@simpol.co.uk.
See also: Terms of Service