← Back

Privacy Policy

Last updated 31 August 2026.

Who we are

This system is operated by Chay Levi Shields, trading as a freelance consultant (hireme.link), as the data controller for the information described below. Contact: Chay@Hireme.link.

What this system is

This is an internal billing tool used to manage customers and invoices for Chay's freelance business. It is not a public website and is not used for marketing. Two kinds of accounts exist: an admin account (Chay), and customer accounts created by Chay so a customer can view their own invoices.

Information we collect

For each customer: name, email address, and optionally company name, phone number, website, and address, entered by Chay when a customer is added. For each invoice: line-item descriptions, quantities, prices, dates, and status. If a customer is given portal access, their email address is used as their login and their account is linked to their own customer record.

How we use it, and why we're allowed to

This information is used solely to issue and track invoices, and to let a customer view their own invoice history and payment status. It is not used for marketing, not sold, and not shared with third parties except the service providers below. The legal basis for this processing is contract (it's necessary to deliver and be paid for the work agreed with each customer) and, for basic business record-keeping such as retaining invoices for accounting purposes, legal obligation.

No online payment processing

This system does not collect or process card payments. Invoices are paid by bank transfer or cash, arranged directly between Chay and the customer, outside this system. No payment card data is ever entered into or stored by this system.

Who can see what

Chay, as the admin, can see all customers and invoices. A customer with portal access can only ever see their own customer record and their own invoices - this is enforced by the database itself (row-level security), not just by the page you're looking at, so there is no way for one customer to see another's data through this system.

Service providers

Data is stored with Supabase (database, authentication), and payment-confirmation emails are sent via Resend. Both process data on our behalf under their own security and data-protection commitments, and neither is used for any purpose beyond running this system - no marketing or analytics use.

International transfers

This system's database and email delivery are both configured to process data within the UK/EU. Supabase and Resend may still rely on underlying infrastructure or sub-processors located outside the UK/EEA as part of running their services; where that happens, it's covered by their own standard contractual safeguards.

Cookies

See the Cookie Policy below.

How long we keep it

Customer and invoice records are kept for as long as needed to run the business and to meet legal, accounting, and tax obligations, then removed or archived.

Your rights

If you're a customer with an account on this system, under UK GDPR you can ask Chay (Chay@Hireme.link) to: give you a copy of the information held about you, correct anything inaccurate, delete it where it's no longer needed for an active or past engagement or legal obligation, restrict or object to how it's processed, or provide it to you in a portable format. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) if you think your data hasn't been handled properly.

Cookie Policy

This system sets one cookie: a login session cookie (managed by Supabase Auth) that keeps you signed in as you move between pages. It is strictly necessary for the system to work - without it, you could not stay logged in - and under UK GDPR/PECR, strictly necessary cookies do not require consent. No advertising, analytics, or tracking cookies are set by this system.

See also the Terms of Service.