Privacy Notice

Caf-Ops Ltd trading as FBA 2 Payday (trading as FBA 2 Payday) is the data controller for the personal data we collect when you use the FBA Blueprint website and services.

• Identity and contact: name and email address.
• Account and login: password hash and authentication tokens.
• Service data: quiz answers, product and business information, profit calculations, scorecards, and any reports or files you upload to Command Center.
• Communications: support messages and feedback.
• Usage and device: IP address, browser type, device identifiers, and how you interact with the service.

We use your personal data to:

• Provide and maintain your account and the FBA Blueprint service - contract performance.
• Process payments, subscriptions, tax and invoicing through our Merchant of Record - contract performance and legal obligation.
• Keep the service secure and prevent fraud - legitimate interests and legal obligation.
• Improve features and fix issues - legitimate interests.
• Send marketing emails, only where you have opted in - consent.

• Service providers for hosting, analytics, error reporting and customer support.
• Stripe, our payment processor, for payment processing, subscription management, tax, invoicing and fraud prevention.
• Professional advisers such as lawyers and accountants.
• Regulators, courts or law enforcement where required by law.

Some of our service providers process data outside the UK and EEA. When this happens, we rely on standard contractual clauses or adequacy decisions to protect your data.

We keep your data for as long as your account is active and for a reasonable period afterwards to meet legal, tax and operational needs. We then delete or anonymise it.

Under UK/EEA data protection law you have the right to:

• Access, correct or delete your personal data.
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with the Information Commissioner's Office (ICO).

We usually respond to requests within one month.

We use encryption in transit and at rest, access controls, and regular reviews to keep your data safe.

We use essential cookies to run the service and analytics cookies to understand usage. You can manage analytics cookies through your browser settings.

We may update this notice and will post the latest version here. If you have questions, contact us through the in-app Help widget.