Privacy Policy

1. Who we are

Deco Operations Ltd is a company registered in England and Wales (company number 17032490). Our registered office is in London, United Kingdom. We are registered with the Information Commissioner’s Office (ICO registration number ZC112793). We operate the website decooperations.co.uk and the Docket order-management platform at docket.decooperations.click.

For the purposes of the UK GDPR and the Data Protection Act 2018, Deco Operations Ltd is the data controller. You can reach us at hello@decooperations.co.uk.

2. What data we collect and why

Contact form (decooperations.co.uk)

When you submit the contact form on our website we collect your name, email address, phone number (if provided), the topic you selected, and the message you wrote. If you tick the optional marketing checkbox we also record that consent. Phone number is optional and used only to follow up on your enquiry.

Lawful basis: legitimate interests (responding to your enquiry). If you opt in to marketing, we additionally rely on your consent for that purpose.

Form submissions are processed by Formspree, Inc. (see §7 below) and delivered to our inbox. We do not store your submission on our own servers beyond what our email provider retains.

Docket — dry-cleaner order management

Docket is used by independent dry-cleaning shops (our clients) to manage customer orders. When a shop uses Docket to process your order, the following data may be collected:

• Your name and mobile phone number (provided at drop-off)
• Order details (garment description, ready date, price)
• SMS messages sent to your number about your order status

Lawful basis: performance of a contract (processing and returning your laundry order). The dry-cleaning shop is the data controller for your customer data; Deco Operations Ltd acts as a data processor on their behalf.

Phone numbers are stored securely in the EU and are used only to send you order-status SMS notifications via Twilio. We do not use your number for any other purpose, and we do not share it with third parties other than the sub-processors listed in §7.

3. Red Moon Practice (iOS app)

Red Moon Practice is a guitar and bass practice app for iPhone. Your playing never reaches us: it has no user accounts, no advertising and no third-party trackers, and it never sends us your audio, your recordings, your journal notes, your song names or your artist name. Anything you make leaves your phone only as a file you send yourself, to a place you pick. The app does not count or report how you use it: there is no analytics in it. The only thing it sends us is a support message, and only when you write one.

• Where your content lives: Songs you add, loops, exercises, routines, and journal entries are stored on your device. The app has no cross-device sync, so this content is not copied to any server of ours or to iCloud, and we never have access to it. If we add sync in a future version it will use your own private iCloud storage, and this policy will be updated before it ships.
• Your audio files: The app practises against audio files you choose from your device or iCloud Drive, and only ones you explicitly pick. When you add a song, Red Moon keeps its own copy inside the app’s storage on your phone, so the song still plays if you later move, rename or delete the original, and so it comes back with your phone if you restore from a backup. Your original file is never moved or altered. That copy stays on your device and is included in your own device backup. It is never uploaded to us, and it leaves your phone only if you export or send the song yourself, as described below.
• The microphone: Used for two things. The tuner listens to a played string to work out its pitch, analysing the sound as it arrives and keeping none of it. And practice takes you choose to record are saved locally on your device. Neither is ever uploaded — the app has no audio upload path — and a take leaves your phone only if you export it yourself. The microphone is the only system permission the app asks for; it does not request access to your music library, and it cannot play Apple Music or Spotify streaming audio at all.
• Files you send yourself: You can take things out of the app as files: a backup of everything (Settings ▸ Your data ▸ Export), a single recording, a song’s audio, a song with its loops and markers for someone else’s copy of Red Moon, an exercise, a routine with the songs it plays, or a tab as text or a PDF. Each file is made on your device and handed to the iOS share sheet, and you choose where it goes: AirDrop, Messages, Mail, Files or another app. The app does not upload it, we keep no copy of it, and the app never learns where it went. A song you send, or a routine that plays songs, carries your artist name if you have set one, so the person who opens it knows who it is from. The send screen shows the name before anything is sent. Nothing else from your profile goes with it, and with no artist name set, no name is sent.
• How we know the app is used: The app itself collects no usage data. It does not count which features you use, it contains no analytics software, and it sends nothing about how you use it. Apple separately gives developers anonymous, aggregated figures about their apps: how many devices opened the app on a given day, how many sessions there were, how many people kept using it after installing, and how often it crashed. Apple collects these only from people who have turned on Share With App Developers in the iPhone’s Settings ▸ Privacy & Security ▸ Analytics & Improvements, under Apple’s privacy policy. The App Store also gives us totals for how many people viewed the app’s page and downloaded it. We see totals, never individuals, and the app plays no part in collecting them. They are not personal data, so there is nothing about you in them for us to access, correct or delete.
• Purchases: Red Moon Practice is free. There is no subscription and nothing to buy in the app, so it handles no payment details.
• Contacting support from inside the app: Settings ▸ Help & About ▸ Contact Support lets you write to us without leaving the app. When you tap Send — and only then; nothing is sent in the background — we receive the email address you enter, the message you write, and three technical details the form displays to you before you send: the app version, your iOS version, and your device model (for example “iPhone17,1”). If you have turned on the crash-report switch described below, one further line travels with it, and the form shows you that too. That is the whole of it. Nothing is attached from your library: not your songs, your recordings, your journal notes or your artist name. Lawful basis: legitimate interests (responding to your enquiry). Delivery is by Formspree, Inc. (see §7), the same processor as the contact form on this site, and retention follows the contact-enquiry rule in §4. The email address is used to reply to you and for nothing else — it is never added to a mailing list, and the app has no accounts to attach it to.
• Crash and freeze reports: iOS keeps its own record of any time the app crashed or froze, and hands it to the app roughly once a day. That record stays on your device, and it is never sent anywhere on its own. You can read it, and clear it, at Settings ▸ Help & About ▸ Diagnostics. One switch on that screen — off unless you turn it on — adds a single line to your next support message: how many crashes or freezes there were, since when, and what iOS called the most recent one, with its iOS version. No call stacks, no logs, no file paths, and nothing about what you were playing. The line is shown to you on that screen, and again in the form, before you send. Lawful basis: legitimate interests (diagnosing a fault you are reporting to us).
• Third-party sharing: The app uses one processor, Formspree, and only when you send a support message as described above. The other processors listed in this policy (Vercel, AWS, Twilio) are not used by this app. Nothing is sold, shared for advertising, or used to track you across apps or websites. The app does not use the IDFA or the App Tracking Transparency prompt, and never will.

If a future version adds a feature that processes data differently (for example, an optional AI feature), this policy will be updated before that feature ships, and any such processing will be clearly disclosed and opt-in.

4. How long we keep your data

• Contact form enquiries: retained in our inbox for up to 2 years, then deleted.
• Docket order records: retained for up to 3 years from the order date to support dispute resolution and shop accounting, then permanently deleted.
• Marketing consent records: retained until you withdraw consent.
• Red Moon Practice: the app sends us no usage data, so there is none to retain. A support message sent from the app is kept under the contact-enquiry rule above. Your own practice content is never sent to us, and stays on your device until you delete it.

5. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data (where no overriding legal basis applies)
• Object to processing based on legitimate interests
• Withdraw consent at any time (where consent is the lawful basis)
• Data portability (where processing is automated and consent- or contract-based)
• Lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk

To exercise any of these rights, email us at hello@decooperations.co.uk. We will respond within one month.

6. Cookies and tracking

decooperations.co.uk does not currently set any cookies or use third-party analytics. If this changes we will update this policy and add a cookie notice.

Docket uses session cookies (HttpOnly, Secure) for staff authentication only. No cross-site tracking cookies are used.

7. Third-party sub-processors

8. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. If you have concerns, contact us at hello@decooperations.co.uk.

9. Changes to this policy

We may update this policy from time to time. Material changes will be noted at the top of this page with a revised “Last updated” date. Continued use of our services after a change constitutes acceptance of the revised policy.

10. Contact

Questions about this policy or how we handle your data: hello@decooperations.co.uk