Draft for review · Version 2026-09-05.2. Service ordering is not yet open. Final service terms and contact arrangements are being confirmed.
Company information
SHANALINK LTD, company number 17433946. Registered office: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ.
Who handles your information
ShanaLink Ltd is the intended controller for customer account and service administration information. Our registered office is listed above. A dedicated privacy contact must be confirmed before launch. During preparation, use the website contact form for privacy enquiries and avoid sending bank details or sensitive documents.
Information and purposes
We collect account identity and contact details, business and premises information, enquiries, quote decisions, document versions and acknowledgements, signature references, mandate status, order updates and support correspondence. These support enquiries, contracts, account security, payment administration and service delivery.
Lawful grounds
Steps requested before a contract and performance of a contract support necessary customer administration. Applicable legal obligations support required records. Proportionate security and fraud prevention may rely on legitimate interests after assessment. Marketing permission must be separate from ordering. We will explain any additional use and its lawful basis before it starts.
Who receives information
Supabase supports account and data services, and the current app is configured for Vercel hosting. Necessary premises and order details may be shared with OptaNet and installation partners when service arrangements are in place. GoCardless and an electronic signature provider are planned integrations; authorisation is not currently connected. We do not collect bank account numbers in this portal. Provider agreements, processing locations and any international transfer safeguards must be verified before launch.
Retention and security
Access is restricted by account and staff role. Contract records include dated copies to establish what was provided and agreed. A documented retention schedule, deletion process, backups and recovery procedures must be approved before live customer use; we do not yet claim a final retention period. We will retain information only for a justified purpose and applicable legal requirements.
Your rights
Depending on the circumstances you can request access, correction, erasure, restriction or portability, object to processing and withdraw consent for consent-based uses. Withdrawal does not affect earlier lawful processing. We may verify identity and explain any lawful reason why a request cannot be met. You can complain to the Information Commissioner at ico.org.uk.
Accessibility and support information
Tell us the support adjustment you need without supplying a diagnosis through ordinary forms. We must establish an appropriate lawful basis, any required special-category condition and restricted handling before recording sensitive vulnerability information. No automated credit or eligibility decision is implemented in this ordering foundation.