Privacy Policy

1. Who we are

Gather360 is a CRM platform operated by Mako Digital, based in Wigan, Greater Manchester, United Kingdom. When we refer to "we", "us" or "our" in this policy, we mean Mako Digital trading as Gather360.

If you have any questions about this privacy policy or how we handle your data, you can contact us at hello@gather360.co.uk.

2. What data we collect

We collect the following information when you register for and use Gather360:

• Account information — your name, email address, company name and password when you create an account.
• Billing information — payment details are processed securely by Stripe. We do not store your full card details on our servers.
• CRM data — client records, contacts, notes, documents, follow-ups and any other data you and your team enter into Gather360.
• Usage data — basic information about how you use the platform, including login times and feature usage, to help us improve the service.
• Cookies — we use essential cookies to keep you logged in and maintain your session. We do not use third-party advertising or tracking cookies.

3. How we use your data

We use your data to:

• Provide and maintain your Gather360 account and CRM service.
• Process subscription payments through Stripe.
• Send essential service communications such as password resets, billing confirmations and important account notices.
• Improve and develop the platform based on usage patterns.
• Respond to support requests and enquiries.

We will never sell your data to third parties. We will never send you unsolicited marketing emails without your explicit consent.

4. Legal basis for processing

Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following legal bases:

• Contract — processing necessary to provide the service you have signed up for.
• Legitimate interest — improving our platform and ensuring security.
• Consent — where we ask for your explicit permission, for example for marketing communications.
• Legal obligation — where we are required to retain data for tax, accounting or legal purposes.

5. Data storage and security

Your data is hosted on servers located in the United Kingdom. We use encrypted connections (SSL/TLS) for all data transmission. Each account is completely isolated from other accounts. We run regular automated backups to protect against data loss.

We take reasonable technical and organisational measures to protect your data from unauthorised access, loss or misuse.

6. Third-party services

We use a limited number of trusted third-party services to operate Gather360:

• Stripe — for payment processing. Stripe's privacy policy is available at stripe.com/privacy.
• WordPress — as the underlying platform. No data is shared with WordPress.com or Automattic.

We do not share your CRM data with any third parties.

7. Data retention

We retain your account data for as long as your account is active. If you cancel your subscription, we will retain your data for 30 days in case you wish to reactivate. After that period, your data will be permanently deleted upon request.

Billing records may be retained for up to 6 years to comply with UK tax and accounting requirements.

8. Your rights

Under the UK GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your personal data ("right to be forgotten").
• Portability — request your data in a structured, machine-readable format.
• Restriction — ask us to limit how we process your data.
• Objection — object to processing based on legitimate interest.

To exercise any of these rights, contact us at hello@gather360.co.uk. We will respond within 30 days.

9. Cookies

Gather360 uses only essential cookies required for the platform to function. These include session cookies to keep you logged in and security cookies to protect against cross-site request forgery. We do not use analytics, advertising or third-party tracking cookies.

10. Children's privacy

Gather360 is a business tool and is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we will notify you via email or through the platform. The "last updated" date at the top of this page will always reflect the most recent revision.

12. Contact us

If you have any questions about this privacy policy or your data, contact us at:

Mako Digital (trading as Gather360)
Wigan, Greater Manchester, United Kingdom
Email: hello@gather360.co.uk

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.