Privacy Policy
Version: 11 August 2026
1. Who is responsible for your information
Luke Eccles, a sole trader trading as ManagedHorizons, is responsible for personal information used to operate customer accounts, billing, security, support and the public website. Contact us at legal@managedhorizons.com or at Unit 171046, PO Box 7169, Poole, BH15 9EL, United Kingdom.
For contact and campaign data uploaded by a customer, that customer normally decides why the information is used. ManagedHorizons normally acts as its processor while providing the platform.
2. Information we collect
- Account identity, contact details and business settings.
- Authentication, session, device, security and legal-acceptance records.
- Billing account, invoice, subscription and Stripe reference information. ManagedHorizons does not store full card details.
- Support tickets, messages and operational communications.
- Contacts including first name, last name, email address, billing email, phone number, company, postal address, country and notes.
- Appointments, templates, campaigns, delivery records and related content uploaded or created by customers.
- Technical information such as IP address, browser or user-agent information, timestamps, request details and security logs.
- Records created when an account is suspended, investigated, exported or scheduled for deletion.
3. Where information comes from
Information comes directly from account holders, customer uploads, browser and server activity, Stripe, email providers, support communications, and security or delivery events generated while the service is used.
4. Why we use information and our lawful bases
- Contract: to create and operate accounts, provide features, process requested communications, administer subscriptions and provide support.
- Legal obligation: to keep required accounting or transaction records, respond to lawful requests and meet legal duties.
- Legitimate interests: to secure the platform, prevent fraud and abuse, maintain reliable operations, investigate incidents, improve the service and protect customers, recipients and providers.
- Consent: where a genuinely optional activity requires it, such as non-essential cookies or optional direct marketing. Consent can be withdrawn.
5. Customer contact and recipient data
Customers are responsible for deciding whether they may lawfully collect, upload and contact recipients. They must provide appropriate privacy information and honour objections, unsubscribe requests and other rights.
ManagedHorizons uses customer contact data only to provide, secure and support the service, follow lawful instructions, enforce suppression and unsubscribe controls, and meet legal or security obligations.
Customers may upload CSV contact lists or add contacts manually. Unsubscribe requests, bounces and complaints are automatically suppressed and customers cannot override those suppressions.
6. Who receives information
- Amazon Web Services: application hosting, database hosting, weekly snapshots, queueing, event processing and email delivery. Production services are primarily hosted in the London region, eu-west-2.
- Stripe: subscription, payment and billing processing.
- RaidHost: website hosting, DNS and business email mailboxes.
Support information is handled through the ManagedHorizons support-ticket system and RaidHost-hosted email. We do not currently use advertising trackers, analytics platforms or an external customer-support platform.
We may disclose limited information where required by law, to establish or defend legal claims, to protect rights or security, or to investigate fraud and serious misuse. We do not sell personal information.
7. International transfers
ManagedHorizons is operated from the United Kingdom and its main AWS production environment is in London. Some providers, including Stripe, AWS and RaidHost or their subprocessors, may process limited information outside the UK.
Where personal information is transferred internationally, we rely on an applicable lawful safeguard used by the relevant provider, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved contractual clauses.
8. Retention
| Record type | Retention approach |
|---|---|
| Active account and customer content | For the life of the account, followed by a seven-day deletion grace period and deletion or irreversible anonymisation as soon as reasonably possible. |
| Invoices, payment and accounting records | Six years. |
| Legal acceptance records | For the agreement and up to six years afterwards where needed for disputes or legal compliance. |
| Security and access logs | Normally 90 days, with longer retention only where needed for an active incident, fraud investigation or legal claim. |
| Support tickets | Normally two years after closure or last activity. |
| Campaign delivery and event records | Normally 12 months. |
| Backups | Weekly AWS VPS snapshots, retained until overwritten or deleted under the applicable AWS snapshot cycle. |
| Suppression and unsubscribe records | Kept indefinitely, or for as long as reasonably necessary, to ensure a person is not contacted again and to demonstrate compliance. |
9. Account deletion and erasure requests
You may request account deletion by contacting legal@managedhorizons.com. We may verify identity and use a seven-day grace period to reduce accidental or malicious deletion.
After that period, active customer content is deleted or irreversibly anonymised as soon as reasonably possible unless a limited record must be retained for accounting, fraud prevention, security, disputes, legal claims, suppression obligations or another legal requirement.
Deleted information may remain in restricted weekly snapshots until those snapshots expire or are deleted. It is kept beyond ordinary use and should only be restored through controlled disaster recovery.
10. Data exports and portability
Account holders can export available account data in CSV format or contact us to request information. We may verify identity and authority before releasing data.
11. Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict, object to or receive personal information in a portable form. Where processing relies on consent, you may withdraw it.
To make a request, contact legal@managedhorizons.com. We may ask for proportionate information to confirm identity and authority.
12. Complaints
Please contact us first so we can investigate. You may also complain to the UK Information Commissioner's Office.
13. Security and logging
We use password hashing, HTTPS, access controls, authentication safeguards, administrative multi-factor authentication, provider verification, weekly snapshots and operational logging.
Customer actions are logged. Administrative action logging and encryption-at-rest settings are being reviewed and should not be assumed beyond the protections supplied by the relevant hosting provider.
We do not intentionally log passwords, full card details, raw authentication or reset tokens, TOTP secrets, recovery codes or production credentials.
14. Automated decisions
ManagedHorizons applies automated operational rules including rate limits, failed-login controls, suppression checks, payment-failure suspension, and email-deliverability safety pauses.
These systems may temporarily suspend or restrict an account or campaign. Affected users may contact support to request review. ManagedHorizons does not currently use AI profiling or automated advertising decisions.
15. Children
The service is for account holders aged 18 or over. It is not designed for children, and customers must not knowingly use the service to collect children's information unlawfully.
16. Cookies
Essential authentication and security cookies are used to keep accounts signed in and protect state-changing requests. We do not currently use analytics, advertising, heat-map or behavioural tracking cookies.
17. Changes to this notice
We review this notice when processing, providers or legal requirements materially change. We will identify the current version and bring important changes to customers' attention where required.