Privacy notice

Who we are

martynslaw.app is a readiness and documentation workspace for UK venues preparing for the Terrorism (Protection of Premises) Act 2025 (Martyn’s Law). The service is operated by We Share The Same Sky Ltd, which is the data controller for the personal data described in this notice.

We Share The Same Sky Ltd is a company registered in England and Wales (company number 14856658), with its registered office at Apartment 2, 46 Monastery Drive, Erdington, Birmingham, B23 7AX.

What we collect and why

Scope check answers. When you use the free scope checker we store the answers you give (venue type, capacity figures, access arrangements) together with the indicative result, so we can operate and improve the checker. These answers describe a venue, not a person. We rely on our legitimate interest in operating and improving the checker (Article 6(1)(f)).

Email address (optional). If you choose to save your result, we store the email you provide and your consent, so we can contact you about your result and relevant guidance updates. We rely on your consent (UK GDPR Article 6(1)(a)), and you can withdraw it at any time.

Account data. If you create an account we store your email address and sign-in records to operate your workspace. We rely on contract (Article 6(1)(b)).

Abuse prevention (IP address). To stop automated abuse of our forms, we briefly process your IP address in memory as a rate-limiting key. It is not written to our database and is discarded once the short rate-limit window passes. We rely on legitimate interests (Article 6(1)(f)).

Website analytics

We use Vercel Web Analytics to understand how the site is used (pages viewed, country, browser and device type, and performance timings). It does not use cookies and does not build individual profiles; visitors are counted using a daily-rotating anonymous identifier. We rely on legitimate interests (Article 6(1)(f)) for this aggregate measurement. Vercel processes this data for us — see vercel.com/legal/privacy-policy.

What we do not do

We do not sell your personal data. We do not share it with third parties for their own marketing. We do not make automated decisions with legal effect about you.

Where your data lives and who processes it

Our database is hosted with Supabase in London (United Kingdom). The application and analytics are hosted by Vercel, whose infrastructure may process requests in the EEA and the United States with appropriate safeguards. Sign-in and other service emails are sent through Resend, our email delivery provider. Email sent to our published contact address reaches us through Forward Email's forwarding service.

Current processors: Supabase (database, authentication and file storage), Vercel (application hosting and web analytics), Resend (outbound email delivery) and Forward Email (forwarding email sent to our contact address). We will keep this list up to date as providers change.

How long we keep it

Anonymous scope checks are kept for no longer than 24 months to help us improve the checker. Saved emails are kept until you withdraw consent or ask us to delete them. Account data is kept while your account is active and deleted on request after closure, subject to records we must keep (for example billing).

Your rights

You have the right to access, correct, delete and port your personal data, to object to or restrict processing, and to withdraw consent at any time. You can also complain to the Information Commissioner’s Office (ico.org.uk).

To exercise any right, contact us using the details in the “How to contact us” section below and we will respond within one month.

How to contact us

Email hello@martynslaw.app for any privacy question or to exercise your rights.