Privacy notice
Last updated 8 November 2026
This notice explains what personal data Signcensus holds, why, and your rights under UK GDPR. It covers this website, Signcensus accounts, and the mailing list some people joined before accounts were available.
Who we are
Signcensus is a software service run from the United Kingdom. For anything about your data, reply to any email we have sent you.
What we collect
- Account details: your name, email address, password (stored only as a secure hash) and the company you belong to.
- Your work: the clients, sites, plans, signs, photos, notes and GPS positions you record. Your company controls this data; we process it on your company's behalf.
- Activity records: which account made each change and when, so your company has a reliable history.
- Contact form: your name, email address, the message you send and any optional details (organisation, phone, type of organisation), the page you sent it from and the website that referred you, and the date you agreed to product news if you ticked that box.
- Mailing list: if you joined our list before accounts were open, the email address and any details you chose to give, with the date you consented.
The public pages of this site do not use cookies, analytics or advertising trackers. Fonts and images are served from our own site, not from third parties. If you sign in, the app sets a strictly necessary cookie to keep you signed in.
Why we use it, and our lawful basis
| What we do | Lawful basis (UK GDPR) |
|---|---|
| Provide your account and the service your company signed up for | Contract |
| Keep a record of changes, prevent abuse and keep the service secure | Our legitimate interest in running a reliable, secure service |
| Reply to enquiries sent through the contact form | Our legitimate interest in answering people who contact us |
| Email people on our mailing list, or who asked for product news, about Signcensus | Your consent, which you can withdraw at any time |
We will never sell your details or share them for anyone else's marketing.
Who handles it for us
- Supabase provides the database, file storage and sign-in, hosted in its London (eu-west-2) data centre.
- Our hosting provider serves this website and the app.
They act as our processors under written terms. Where either may access data from outside the UK, it is covered by the UK International Data Transfer Addendum or a UK adequacy decision.
How long we keep it
Account data is kept while your company has an account, then deleted within 90 days of the account closing unless the law requires us to keep it longer. Contact form enquiries are kept for up to 24 months after our last exchange. Mailing list details are kept until you unsubscribe or ask us to remove them, and for no more than 24 months.
Your rights
You can ask to see, correct or delete your details, and you can withdraw consent at any time. Withdrawing doesn't affect anything we did before. Contact us as described above and we will reply within one month.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office.