Back to The Suite

Privacy and cookies

What we hold about you as a member of The Suite, what it is for, who else touches it, how long we keep it and what this site puts in your browser. Written to be read, not scrolled past.

Ascendz Digital LimitedEffective 11 September 2026
Section 1

Who we are, and who this is about

The Suite is run by Ascendz Digital Limited, registered in England and Wales with company number 17079053, whose registered office is Tudor House, Newport Road, Eccleshall ST21 6BG (“Ascendz”, “we”). It is the business of Toni Martin. The site is byascendz.co, and questions about anything on this page go to clientsupport@ascendz.co, where they reach a person.

This page is about you. The member: the person who bought, or was given, access to The Suite. For that information we are the data controller and this page says how we handle it.

Your clients are a different matter. The Suite keeps a record of each of your clients, built from what your apps report. For that information you are the controller and we are your processor, and the Data Processing Agreement is the document that governs it, not this one.

Each product in The Suite has its own privacy policy for what happens inside it. Zenitro, Draftd, Kestry, Relavo and Advoro each publish one, and they say more about the content you create there than this page can.

Section 2

What we hold about you

Everything below exists because something you did put it there.

Your membership
Your email address, which plan you bought, which founding tier it fell in, whether your access is live, and the Stripe identifiers that let us find your payment. We never see or hold your card details; Stripe does.
Signing in
There is no password. You enter your address and we email you a link. Supabase, which runs our sign-in, holds the address and the session that link creates.
Your profile
What you tell us about your business so the apps can share it: business name, logo, support address, booking link, brand colour and timezone. All optional.
Your apps
Which products you have connected to The Suite and when each last reported anything, so your suite page can say what has been happening.
What we sent you
A copy of every email The Suite sends you, with its subject and its contents, so we can answer “what did you tell me” from what was actually sent.
Support
When you write to us from inside The Suite, we keep the message, the page you were on and your address, so the reply goes to the right person about the right thing.
The roadmap
Which items you have voted for, so a vote counts once.
A record of changes
A log of what happened to your membership and when: purchases, sign-ins, invitations, access changes and emails sent. It exists so we can explain anything about your account later.

What we do not hold. No analytics on you. No advertising profile. No record of what you do inside the products beyond what they choose to report to your client record, which is the DPA’s business, not this page’s.

Section 3

What we use it for

To give you what you paid for. Knowing who you are is how the door to each product opens without a second account, and how the apps know which suite to report to. This is performance of our contract with you.

To take payment and keep the books. Stripe takes it; we keep the record that says it happened. Contract, and the legal duty to keep accounts.

To talk to you about your membership. The email that says you are in, a reply to something you asked, notice if something changes that affects you. These are part of the service rather than marketing, and there is no unsubscribe from them because they are the only way we can tell you something you need to know.

To keep it running and safe. Server logs, error reports and the record of changes above, kept for our legitimate interest in a service that works and in being able to say what happened when something does not.

Nothing else. We do not sell it, rent it, or use it to build a profile of you. If we ever wanted to email you about something that was not your membership, we would ask first and you could say no.

Section 4

Who else touches it

Four suppliers, each doing one job, each bound by a contract that says they may only use what they hold to do that job for us.

Supabase
Database and sign-in. Holds everything in section 2. West Europe (London), United Kingdom.
Railway
Runs the application. Handles your information in transit and in memory and stores none of it.
Resend
Sends email to you, from noreply@send.byascendz.co. Handles your address and the message.
Stripe
Takes payment from you and holds your billing details. Stripe is its own controller for that, under its own policy.

No AI provider is on this list. Nothing The Suite holds about you is sent to one. Some of the products use AI for the work you do inside them, and their own policies say which and where.

The products themselves. When you open a product from your suite, we tell it your email address so it can let you in, and each product asks us whether your membership is still active. That is the whole exchange.

Beyond these, we share your information only if the law requires it, or if the business changes hands, in which case your membership goes with it on the same terms.

Section 5

Where it is held

In the United Kingdom, at Supabase’s London region. Where a supplier moves any of it outside the UK, we rely on the safeguards UK GDPR requires, which may include the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with that supplier’s own data protection terms. Ask us at clientsupport@ascendz.co for the specifics.

Section 6

How long we keep it

While you are a member, all of it, because all of it is in use.

When your membership ends, we delete your profile, your apps, your votes and the copies of emails we sent you within 30 days of you asking, and otherwise within 30 days of the membership lapsing. Your clients’ records go with them, on the terms in the DPA.

Two things stay longer. The record that you paid, and what for, is kept for six years because tax law requires it. And the log of changes to your membership is kept for as long as we might need to explain a decision about it, which in practice is the same six years.

Section 7

Your rights

Under UK GDPR you can ask us to tell you what we hold about you, correct it, delete it, give it to you in a form you can take elsewhere, stop using it for a particular purpose, or restrict what we do with it while a question is settled. Where we rely on legitimate interest, you can object.

Most of this needs no request. Your profile is yours to change on your details page, and your clients’ records can be deleted by you from the record itself. For anything else, including a copy of everything we hold, email clientsupport@ascendz.co and we will answer within a month, usually far sooner, and at no charge.

If you think we have got something wrong and we have not put it right, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather hear from you first.

Section 8

How it is kept safe

Everything travels encrypted and is stored encrypted. Sign-in is by a link sent to your address rather than a password we would have to protect. Access to the database is by keys that never reach a browser, and the one key that lets the products ask about your membership is a secret shared with them alone. Each product that opens a door for you gets a token signed for it and nobody else, good for ninety seconds.

The DPA’s Annex B lists the measures in full, and says plainly what is not in place. If we ever have a breach that puts you at risk, we will tell you without undue delay and, where the law requires it, the ICO within 72 hours.

Section 9

Cookies

This site sets only what it needs to keep you signed in and nothing that tracks you. There is no analytics script and no advertising pixel. That is why the banner at the bottom of the page has one button rather than a choice: there is nothing to choose.

Your session
Set by Supabase when you sign in, in your browser’s local storage rather than as a cookie. It is what keeps you signed in between visits. Cleared when you sign out.
sbos_tools
A signed cookie set when you open one of the member tools, so the tool can load without you signing in to it separately. Lasts twelve hours and holds nothing but the fact that you are entitled.
suite_cookies
Remembers that you have seen the cookie notice, in local storage, for a year. Holds nothing else.

Each product in The Suite shows the same notice and sets only what it needs; their own policies list what that is. If any of this changes, the banner changes first and asks before anything that tracks is loaded.

Section 10

Children

The Suite is for people running a business and is not directed at anyone under 18. We do not knowingly hold information about a child. If you believe we do, tell us at clientsupport@ascendz.co and we will delete it.

Section 11

Changes to this page

When this page changes, the date at the top changes with it. If a change affects what we do with your information in a way you would want to know about, we will email you before it takes effect rather than after. The current version is always at byascendz.co/privacy.

Section 12

Contact

Ascendz Digital Limited
Tudor House, Newport Road, Eccleshall ST21 6BG
Company number 17079053

For anything on this page: clientsupport@ascendz.co. It reaches a person rather than a queue.

This page is governed by the law of England and Wales.