Privacy policy

This policy explains what personal and farm business data Withy collects, why, and the rights you have over it, in line with UK GDPR. Withy (“we”, “us”) is a UK-based service — see the Contact section below for how to reach us.

What we collect

• Account details: email address, and password (stored hashed, we never see it).
• Farm data: your Single Business Identifier, imported land parcels, land cover and hedge data from the RPA, existing agreement status, and any goals or corrections you add.
• Agent details, if you sign up as an agent: business name, address, and contact details, required by RPA/Ordnance Survey licensing conditions.
• Billing information: handled directly by Stripe — we never see your card details.
• Plans generated for you, and your chat and support messages.
• Basic usage analytics via Umami, which doesn’t use cookies or identify you personally.

Why we collect it

To create and run your account, import and match your farm’s land data against SFI actions, generate your plan, process payment, and contact you about your plan, your subscription, or (if you opt in) scheme changes affecting your farm.

Ordnance Survey and RPA data

Land data imported via the RPA derives from Ordnance Survey MasterMap. By importing your land data you accept the Ordnance Survey Public Sector End User Licence. If you sign up as an agent, your business contact details must be available to the RPA or Ordnance Survey on request, as a condition of that licence.

How long we keep it

We keep your account and farm data for as long as your account is active, and for 2 years after cancellation in case you return, unless you ask us to delete it sooner.

Your rights

You can ask us to export a copy of your data, or to delete your account and data, at any time from your account settings or by contacting us. You also have the right to correct inaccurate data, and to complain to the Information Commissioner’s Office if you’re unhappy with how we handle your data.

Who can access your data

We (as the operator) can access account data to provide support and resolve issues. This access is logged. We don’t sell your data, and only share it with the service providers needed to run Withy: Supabase (hosting and database), Anthropic (generating your plan’s narrative), Stripe (payment), and Mailgun (email).

Cookies

Withy uses only strictly necessary cookies: your login session (Supabase), and Stripe’s own checkout process. Our analytics (Umami) doesn’t use cookies. Because of this, we don’t show a cookie consent banner — there’s nothing to consent to beyond what’s necessary to run the service.

Contact

Questions about this policy, or a data request: support@getwithy.co.uk