Privacy Notice

Who we are

Goodhall Solutions Ltd is the controller of the personal data described in this Privacy Notice, unless we clearly state otherwise.

Contact email: [email protected]

Product websites

This page is the master version of our Privacy Notice. Each product site publishes its own version, adapted from this document and scoped to that site:

• Tagaris Privacy Notice
• Fodaris Privacy Notice
• Autos Invoice Privacy Notice

Tagaris, Fodaris and Autos Invoice are self-hosted products. When you install them on your own infrastructure, the data inside your installation stays on your own systems. Goodhall Solutions Ltd does not receive, access or process that data.

The personal data we may collect

Depending on how you interact with us, we may collect:

• your name and email address;
• business or organisation name, where provided;
• details submitted through contact forms or enquiries;
• purchase and licence information;
• technical information such as IP address, browser type, device information and pages visited;
• security, session and website statistics information generated through providers used to host, secure and operate our sites;
• correspondence you send to us.

How we collect personal data

• directly from you when you complete forms, email us, request access, or contact us;
• automatically when you use our websites;
• through self-hosted tools we use for feedback workflows;
• through service providers used for hosting, security, domain and communications services.

Why we use personal data

We may use personal data to:

• respond to enquiries and support requests;
• process purchases and manage licences;
• operate, secure and improve our websites and services;
• communicate about Tagaris, Fodaris, Autos Invoice, Goodhall Solutions and related updates;
• maintain records and protect our legal and business interests;
• comply with legal obligations where they apply.

Lawful bases

Depending on the circumstances, we may rely on one or more of the following lawful bases:

• Legitimate interests: for operating, securing and improving our websites and services, and handling enquiries;
• Contract: where processing is necessary to provide a service you request or to take steps before entering into a contract;
• Consent: where we ask for it for a specific purpose;
• Legal obligation: where we need to comply with applicable law or regulation.

Who may process personal data

We use third-party services to host, secure and operate our websites and communications. Depending on how you interact with us, limited personal data may be processed through providers we use, including:

• OVHcloud, for hosting infrastructure;
• Cloudflare, for website security and traffic handling;
• GoDaddy, for domain and hosting-related services where used;
• Microsoft 365, for email and business communications;
• Stripe, for payment processing. We do not store your payment details;
• Keygen, for licence management;
• Formbricks, where used as part of our self-hosted feedback processes hosted on our own infrastructure.

We do not sell personal data. We do not share personal data with third parties for advertising purposes.

We may disclose personal data where we are legally required to do so.

International transfers

We do not currently intend to transfer personal data outside the United Kingdom except where this may occur as part of the normal operation of a service provider we use. If this changes, we will update this Privacy Notice accordingly.

How long we keep personal data

• purchase and licence records: for as long as your licence is active, and for a reasonable period afterward for legal and accounting purposes;
• contact and support correspondence: for as long as reasonably necessary to handle the matter;
• security and website statistics information: for as long as reasonably necessary for site operation, security, and troubleshooting.

If our services, sales model or data handling practices change in future, we will update this Privacy Notice to reflect those changes.

Your rights

Depending on the circumstances, you may have the right to:

• access your personal data;
• request correction of inaccurate data;
• request deletion of your data;
• restrict or object to certain processing;
• withdraw consent where we rely on consent;
• complain to the Information Commissioner’s Office (ICO).

Security

We use reasonable technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse or alteration. No internet-based service is perfectly secure, but we take security seriously and apply proportionate safeguards.

Cookies and similar technologies

Our websites may use cookies and similar technologies through providers used to host, secure and operate the sites. For more information, please read our Cookie Notice.

Analytics

We use Umami, a privacy-friendly self-hosted analytics service, to understand aggregate usage of our websites. Umami does not set any cookies or use any client-side storage. When you visit, we record the page you viewed, the referrer (if any), your browser and operating system, and the country derived from your IP address. Your IP address itself is hashed using a salt that rotates daily, so we cannot re-identify you across days or across other sites. The data is stored on our UK-hosted server at analytics.goodhallsolutions.co.uk and is not shared with any third party. You can turn analytics off for your browser at any time on the Cookie Notice page.

Updates to this notice

We may update this Privacy Notice from time to time to reflect changes to our websites, services, providers or legal obligations. The latest version will always be published on this page.