Legal
This policy explains what personal data Micro Forge Ltd (trading as Packagewise) collects, why, and how we use it. It applies to users of the Packagewise platform and website.
Last updated: April 2026
1.
Packagewise is a product of Micro Forge Ltd, a company incorporated in England and Wales. We provide a white-label UK redundancy package calculator to employment law firms, HR consultancies, trade unions, and outplacement providers. In this policy, 'we', 'us', and 'our' refer to Micro Forge Ltd. You can contact us at packagewiseuk@gmail.com.
2.
When you create an account we collect your name, business email address, and firm name. When you subscribe to a paid plan, payment is processed by Stripe — we receive a customer reference and subscription status but never see or store your full card details. We also collect usage data (number of embed loads) tied to your account to power your dashboard analytics. We do not collect personal data about the employees who use the embedded calculator; that tool requires only non-identifying financial inputs (age band, years of service, weekly pay).
3.
We process your account and billing data on the basis of contractual necessity — it is required to provide the service you have signed up for. We process usage analytics on the basis of our legitimate interests in operating and improving the service. Where we send you service communications (e.g. account confirmation, billing receipts), this is also on the basis of contractual necessity.
4.
We use your data to: create and manage your account; process subscription payments via Stripe; provide access to the dashboard and embed service; send you transactional emails relating to your account (sign-in links, billing confirmations); and analyse aggregate usage to improve the product. We do not sell your data to third parties. We do not use your data for behavioural advertising.
5.
We share your data with the following sub-processors who act on our instructions: Supabase Inc (database and authentication hosting, EU/US); Vercel Inc (application hosting, US); Stripe Inc (payment processing, US/EU); Resend Inc (transactional email, US). Each processor is subject to appropriate data transfer safeguards including Standard Contractual Clauses where required.
6.
Account data is retained for the duration of your subscription and for up to 7 years afterwards to comply with UK financial record-keeping obligations. If you close your account and request deletion, we will delete your personal data within 30 days except where retention is required by law.
7.
You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data (subject to legal retention obligations); restrict or object to processing; data portability; and withdraw consent where processing is based on consent. To exercise any of these rights, email us at packagewiseuk@gmail.com. If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8.
The Packagewise dashboard uses a session cookie set by Supabase to keep you logged in. This is a strictly necessary cookie and does not require consent. The public marketing site does not set any tracking or analytics cookies. The embedded calculator widget, which runs on our servers within an iframe on your clients' websites, sets no cookies.
9.
We use industry-standard security measures including encrypted connections (HTTPS/TLS), hashed credentials, and access controls. API keys and authentication tokens are never logged. Embed access is gated by a client ID and API key pair. We review our security practices regularly.
10.
We may update this policy from time to time. The version published on this page applies from the date shown below. We will notify active subscribers of material changes by email.
11.
This policy is governed by the laws of England and Wales. The applicable UK data protection law is the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.