Privacy policy

1. Who we are

RazaDesk is a trading name of FixNVibe Ltd, a private limited company registered in Scotland under company number SC830134. Registered office: 52 Broomage Crescent, Larbert, Scotland, FK5 4NU. We are the data controller for the personal data described in sections 3 to 5. You can contact us about privacy at [email protected].

2. The short version

• We collect only what you give us through the contact form, the vote page, the account portal and the software itself.
• We do not run analytics, advertising or tracking of any kind on this website, and we load nothing from third-party servers.
• We never sell personal data.
• For the customer records that repair shops keep inside RazaDesk, the shop is the controller and we process that data on the shop's instructions (section 6).

3. Data we collect on this website

Contact form. Your name, shop name (optional), email address, the topic you pick and your message. We use this to reply to you and, if you ask for a trial or a quote, to set it up. It is stored in our database and a copy is emailed to us. Lawful basis: taking steps at your request before entering a contract, and our legitimate interest in answering enquiries. We keep enquiries for as long as they are useful for answering you and following up, and we review and clear out old ones from time to time. You can ask us to delete yours at any time.

Feature vote. Which feature you voted for. To stop repeat voting we keep a short-lived, in-memory count against your IP address on our server; it is not written to our database. Your browser remembers your vote in local storage so the page can show you the results. Lawful basis: legitimate interest in running a fair poll.

Account portal (razadesk.com/account). Your account email and password (we never see the password in clear text; it is handled by our authentication provider), your subscription status, licence key, the devices activated on your licence and when they were last seen. This is needed to provide the service you have signed up for. Lawful basis: performance of a contract.

Downloads. When you download the installer, our file host records the request (IP address, time, file). Lawful basis: legitimate interest in serving and securing downloads.

Server logs. Like every website, our hosting provider records the IP address, browser type, requested page and time of each request for security and fault-finding. Logs are kept for a short period and are not used to build profiles. Lawful basis: legitimate interest in keeping the service secure.

WhatsApp and email. If you choose to message us on WhatsApp or by email, we receive whatever you send. WhatsApp is provided by Meta Platforms and is governed by their own privacy policy.

4. What we do not do

• No analytics, advertising cookies, pixels or fingerprinting.
• No fonts, scripts or images loaded from third-party servers, so no third party sees your visit.
• No marketing emails unless you explicitly ask for them. We only email you to answer you or to run your account.
• No automated decision-making or profiling.

5. Data we process in the RazaDesk software

When your shop uses RazaDesk, the app stores your shop's data: repairs, customers, sales, stock, staff profiles and PINs, settings and message logs. This is synced to our cloud database so it is available on each of your devices and is backed up. We process this data to provide the service to you. Lawful basis: performance of a contract. We keep it for as long as your subscription is active. If your subscription ends we keep it for at least 90 days so you can export it or come back, after which we remove it in our periodic clean-up, or sooner if you ask us to. You can export your data from inside the app at any time.

6. Your customers' data: we are a processor

The details of your customers and their repairs belong to your shop. For that data your shop is the controller and FixNVibe Ltd is a processor acting on your instructions. This means we only use it to run RazaDesk for you, we keep it confidential, we protect it with appropriate security, we tell you without undue delay if we become aware of a personal data breach affecting it, we help you respond to your customers' rights requests, and we delete or return it when you leave. The full processing terms are in section 9 of our Terms and conditions. Your shop is responsible for having a lawful basis to collect its customers' details and for its own privacy notice to them.

Customer tracking pages. A shop can share a private tracking link with a customer. The page shows the repair's stage, the device, the quoted price and the shop's contact details. Anyone with the link can view it, so the shop should share it only with the customer. Tracking pages are not indexed and are not cached.

7. Who we share data with

We use a small number of service providers (sub-processors) to run RazaDesk. Each only receives what it needs to do its job, under a contract that requires it to protect the data:

• Railway — application hosting and our database. Hosted in Railway's EU West region (Amsterdam, Netherlands).
• Supabase — sign-in (authentication) for the account portal and the web app, and password-reset emails. Hosted in Supabase's West Europe region (London, United Kingdom).
• Cloudflare — DNS, network protection and hosting of the installer downloads. Cloudflare runs a global network, so requests may pass through servers outside the UK.
• Resend — sending transactional emails such as enquiry copies, licence keys and password resets. Hosted in Resend's EU region (Ireland).

We may also disclose data if the law requires it, or to professional advisers under confidentiality. We do not share data with anyone else and we do not sell it.

8. International transfers

Your data is stored in the United Kingdom (Supabase, London) and the European Union (Railway, Amsterdam; Resend, Ireland). The UK recognises the EU as providing adequate protection, so these are not restricted transfers. Cloudflare's global network may route web traffic through servers outside the UK and EU; for that, and for any other transfer outside the UK, we rely on the UK International Data Transfer Addendum to the EU standard contractual clauses so that your data stays protected to UK standards.

9. Security

Connections to razadesk.com and to our servers are encrypted (HTTPS). Passwords are stored only as salted hashes. Each shop's data is separated from every other shop's. Access to production systems is limited to the people who need it. No system is perfectly secure, so if you believe your account has been compromised, contact us straight away.

10. Your rights

Under UK data protection law you have the right to ask us for a copy of your personal data, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. To exercise any of these, email [email protected]. We will respond within one month. If the data belongs to a repair shop's customer records, we will pass your request to the shop, which is the controller.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve it first.

11. Children

RazaDesk is a business tool and this website is not directed at children under 16. We do not knowingly collect their data.

12. Changes

If we change this policy we will update the date at the top. Significant changes will be announced to account holders by email.

See also our Cookie policy, Terms and conditions and Accessibility statement.