Privacy notice

What Client Ready handles, why it is needed, and how to request access, correction or deletion.

Our roles

Elias Digital Studio operates Client Ready in the United Kingdom. Proposed operator details are Spike Longstaff trading as Elias Digital Studio, subject to confirmation of legal status and the public correspondence address before production activation. Contact eliasdigitalstudiouk@gmail.com.

For business account administration, security, support and service records, the operator acts as a controller. For information a subscribing business collects from its clients through the workspace, that business generally decides the purpose and acts as controller; we process its client content on its instructions. If you are a client recipient, contact the business that sent your request for decisions about its collection and retention. We will help direct requests appropriately.

Information handled

Account information includes the account email, profile details, business details and authentication status. Client workspaces may hold names, company details, email, phone, address, websites, dates, instructions, written drafts, answers, uploaded files, feedback, review history, internal notes and calendar entries. Exports contain the selected business’s records.

Security information includes encrypted authenticator setup material, hashed recovery-code records, verified-session identifiers, limited browser/device descriptions, timestamps and request-limit counters. We do not store your member password ourselves. Payment-card details are not collected by this application; payments are not active.

Purposes and lawful bases

We use account and service information to provide the requested account, operate its workflow, respond to support and manage agreed orders. The usual basis for necessary account administration is performing the agreement with the account holder, or our legitimate interests in providing services to a business where its staff member is the contact. We use proportionate security records to protect users and investigate misuse under legitimate interests, and retain records required by applicable law where a legal obligation applies.

Client content is handled on the customer business’s documented instructions. The business must identify its own lawful basis and provide any necessary notice. We do not treat use of a private link as blanket consent to unrelated processing or marketing.

Service providers and international handling

Wix supplies hosting, authentication, database, file storage and platform services. Its published data-processing terms and security information are linked on our data-processing page. Wix operates internationally; UK-only storage is not promised. The applicable transfer safeguards and provider details must be checked for the processing involved before production activation.

Google reCAPTCHA is used on the sign-in page for abuse prevention. Google sign-in is optional and uses the account information authorised through that provider. These providers may process technical connection information under their own applicable terms. No AI model or AI processing integration is enabled. We have not added advertising or optional analytics tools. Fonts used by our application are served with the site.

Private access and disclosures

Business authentication and ownership checks protect business records. Authenticator protection, where enabled, is checked before business API access. A client bearer link opens its own request and can optionally require a separate code. It does not open the business’s client directory, internal contact profile, calendar or other requests. Link holders can view the request’s submitted answers and feedback. Treat the link as confidential.

We may access relevant information where necessary for authorised support, security investigation, operating the service or a lawful disclosure. We do not sell client content or publish it as a public directory.

Retention and deletion

The customer business is responsible for deciding how long it needs its client content. Archiving closes the client link but does not itself erase records. Moving a client to the recycle bin closes their request links and starts a seven-day recovery period. The business can restore or export during that period. After it ends, the next successful daily maintenance run erases linked operational records and uploaded file versions. Restored requests receive fresh links. Contact support for account-level deletion or a lawful restriction on erasure. Current access is still limited to permitted test information.

Verified Client Ready browser sessions last no more than 12 hours unless revoked sooner. Authenticator setup attempts expire after 10 minutes. Security counters and temporary claims are kept only as needed for abuse prevention and investigation; unused recovery-code hashes remain while their protection is enabled. A saved client draft may be replaced as the client edits; submitted answers and review events remain with the request until removed under the applicable retention process.

Wix database backups can retain copies temporarily under their applicable recovery lifecycle. Database backups are separate from original media files; they do not prove file recovery. We must ensure erased records are not reintroduced into ordinary processing after a restoration. Downloaded exports are outside our control and must be secured and erased by the person or business that downloaded them.

Your rights and choices

Depending on the circumstances, you may ask for access, correction, erasure, restriction or portability, or object to processing based on legitimate interests. Where consent is the basis, it can be withdrawn without changing the lawfulness of earlier processing. Rights can be subject to legal exceptions. We may need proportionate identity checks and will not ask you to email passwords or recovery codes.

Send requests to the contact above. We aim to respond within one month where the applicable law requires it, and will explain any lawful extension. If we process your information for a business customer, we will help that business respond. UK complaints can be raised with the Information Commissioner’s Office; you can also contact an applicable local supervisory authority.

Cookies, children and updates

The cookies and storage notice explains authentication, security and demo storage. The service is for adult business users and is not designed for collecting children’s information. Material changes to this notice will be dated and communicated appropriately. Do not upload highly sensitive records or children’s information under the current service restrictions.