United Kingdom

Privacy Policy_

Last updated: 28 October 2026. Written to lean toward UK GDPR / Data Protection Act 2018. Working draft pending privacy-aware review before public sale.

1. Who controls your data

The data controller is OPERATOR_SYSTEMS, United Kingdom. Full company name and registered address will be published on this page before public sale.

Contact for privacy requests: signal@operator-systems.com.

2. What we collect

• Contact data — name, email, and message content when you email us or use a future contact form.
• Build list sign-ups — your name, email and (optionally) which pack you are interested in, so we can email you when a build slot opens. Stored with our email provider, Resend. Ask us any time to remove you.
• Project data — business ideas, account usernames you share, and files needed to deliver the install (you should not send passwords in plain email; use agreed secure channels).
• Payment data — card details are processed by Stripe; we typically receive limited billing metadata (name, email, amount, last4), not full card numbers.
• Technical data — this preview site does not run analytics. If analytics are added later, we will update this Policy (IP address, browser type, pages viewed).

3. Why we use it (lawful bases)

• Contract — to respond to enquiries and deliver paid services.
• Legitimate interests — to secure the site, improve the service, and keep basic business records.
• Legal obligation — tax and accounting records where required.
• Consent — only where we ask for it (e.g. optional marketing email). You can withdraw consent anytime.

4. Sharing

We do not sell your personal data. We may share limited data with:

• Stripe (payments).
• Resend (build list contacts and email).
• Email / hosting providers needed to run the site and mailbox (e.g. domain email for signal@operator-systems.com).
• Professional advisers (accountant, solicitor) under confidentiality.
• Authorities if required by law.

5. International transfers

Some tools (e.g. Stripe, hosting) may process data outside the UK. Where that happens we rely on appropriate safeguards (e.g. UK adequacy decisions or standard contractual clauses). A fuller processor map will be published when the stack is final.

6. Retention

Enquiry emails: typically up to 24 months if no project starts. Client project records: for the life of the engagement plus up to 6 years for accounting. Or shorter if you successfully request erasure and no legal hold applies.

7. Your rights (UK)

You may have rights to access, rectify, erase, restrict, object, and data portability, and to complain to the ICO (ico.org.uk). Email signal@operator-systems.com to exercise rights.

8. Cookies

This preview site does not set marketing cookies. Essential hosting cookies may appear. A cookie banner will be added if non-essential cookies are introduced.

9. Children

Services are aimed at adults running businesses. We do not knowingly collect data from children under 16.

10. Changes

We may update this Policy; the date above will change. Material changes will be noted on this page.

Working draft. Confirm controller identity and processors with a privacy-aware review before public launch.