Privacy Policy

Effective date: 13 August 2026

Welcome to Easy Days Work (“we,” “our,” or “us”). MAB Logic is a trading name of Meddalwedd Am Byth Ltd (company number 16947505), registered in England and Wales. Easy Days Work is a product of MAB Logic.

This Privacy Policy explains how we collect, use, and safeguard information when you visit https://easydays.work (“Website”) and when you use the product application at https://app.easydays.work (web and mobile). Product use is also subject to our Terms of Service.

Easy Days Work is focused field software for trade operators. Pro is priced at £24 / month. New accounts are waitlist-only until we open self-serve signup. This Website is for product information and contact enquiries. There is no account creation or card checkout on the Website itself. Those flows will run in the product app and on Stripe-hosted pages when signup opens.

The parent company privacy notice for other MAB Logic products is at mablogic.com/privacy.

Who we are

Legal name: Meddalwedd Am Byth Ltd (company number 16947505)
Trading names: MAB Logic, Easy Days Work
Registered office: International House, 10 Churchill Way, Cardiff, United Kingdom, CF10 2HE
ICO registration: ZC167809
Privacy contact: privacy@easydays.work
General enquiries: enquiries@easydays.work

Controller and processor

Meddalwedd Am Byth Ltd is the data controller for:

Personal data collected through this Website (including the contact form)
Account, authentication, and billing data for the product, where we determine the purposes of processing

When you use the product to store your business records (customers, sites, visits, findings, photos, signatures, and similar), your organisation is the controller of that operational data and we act as a processor (or service provider) under UK GDPR. You must have a lawful basis to upload it.

Information we collect

When you contact us (via our contact form), we may collect:

Name
Email address
Subject or enquiry type (optional)
Message content
How you heard about us (optional)
Your agreement to these terms and this policy (required to submit the form)

When you create an account in the product app, we (and our processors) collect account and billing data needed to provide the service, for example organisation name, login email, authentication data (Amazon Cognito on AWS), subscription identifiers, and a record that you accepted the Terms of Service and this policy. Card details are collected by Stripe, not on this Website and not on our servers.

When you use the product, we store the operational records you enter (customers, sites, visits, findings, products used, photos, signatures, and similar) in our application database (Neon, PostgreSQL) and photo storage (AWS S3).

Diagnostics. To keep the service working we collect crash and diagnostic data from the product web and mobile apps via Sentry, for example stack traces, device and release metadata, route names, and a pseudonymous telemetry identifier. This does not include customer names, addresses, visit notes, photos, screenshots, or session replay.

When you browse the Website, we may collect technical data such as:

IP address (often truncated or anonymised by our hosting provider)
Browser type and device
Pages visited and approximate time on site
Referring URL

We do not collect payment card details on the Website.

Photos and signatures

Technician photos and customer signatures document the inside of a customer’s property. They are personal data about identifiable premises and, often, their occupants.

Your organisation is the controller of that data. You must have a lawful basis to capture and upload it, and must not upload data you are not entitled to process.

We host photos and signatures so you can run your service. We do not send them to Sentry: crash reporting is configured without screenshots, view hierarchy, attachments, or session replay.

How we use your information

We use information to:

Respond to contact and partnership enquiries
Operate, secure, and improve the Website
Provide and bill for the product when you have an account (via the product app and Stripe)
Diagnose and fix crashes and faults in the product apps
Comply with legal obligations

We do not sell your personal information.

Lawful basis (UK and EEA)

We process personal data on the basis of:

Consent: when you submit the contact form and agree to this policy
Contract: when you create an account and subscribe so we can provide the service
Legitimate interests: to respond to enquiries, operate and secure the Website, and keep the product working (including crash diagnostics), where those interests are not overridden by your rights
Legal obligation: where we must retain or disclose data by law

You may object to processing based on legitimate interests by contacting privacy@easydays.work.

Cookies and similar technologies

Website. We use essential cookies only where required for the Website to function. We do not currently use advertising or behavioural analytics on this Website. If we add privacy-friendly analytics later, we will update this policy. You can control cookies through your browser settings.

Product web app. Crash reporting may use client-side storage in the logged-in product app so we can diagnose faults. That storage is not used for advertising. We do not show a cookie banner on the Website or in the app for this.

Subprocessors

We share information with service providers who help us run the Website and product, under contract and only as needed to provide their service. We may also disclose information to legal authorities when required by law.

Product

Provider	Region	What they handle
Amazon Web Services	UK (London, `eu-west-2`)	Hosting, authentication (Cognito), photo and signature storage (S3), system email (SES), backend logs
Neon	UK (AWS London, `eu-west-2`)	Application database (PostgreSQL)
Stripe	United Kingdom (Stripe Payments Europe)	Subscription payments. Card numbers are collected by Stripe, not by us
Sentry	EU (Frankfurt); API `de.sentry.io`	Client-side crash telemetry only

Website

Provider	What they handle
Bluehost	Static hosting of this Website
Cloudflare	Contact-form delivery (Worker) and bot protection (Turnstile) on signup
Resend	Contact-form email to enquiries@easydays.work. Product system mail uses AWS SES, not Resend

Form processing is handled by MAB Logic on behalf of Meddalwedd Am Byth Ltd.

International transfers

Most product data stays in the United Kingdom (AWS and Neon in London).

Some providers may process personal data outside the UK:

Stripe and Resend may process data outside the UK under their data-processing terms and standard contractual clauses (or equivalent safeguards).
Sentry stores crash event data at rest in the EU (Frankfurt), with EU backups. Organisation-identifying metadata may be replicated out of region, and Sentry Inc. (US) and its group companies may access data for support and service delivery. Transfers rely on Sentry’s self-certification to the EU–U.S. Data Privacy Framework including the UK Extension, with standard contractual clauses plus the UK Addendum as the fallback. Accurate phrasing: event data is stored in the EU, accessible from the US under the DPF and SCCs, not “EU only”. Sentry’s AI/Seer features are off, so crash events are not sent to US LLM subprocessors.

Data retention

We keep contact submissions for as long as needed to manage our relationship with you, or as required by law. Account and billing data for the product is retained while your organisation is active and for a reasonable period afterward for legal and accounting purposes.

Operational product data you enter for your business (including visit photos and signatures) is retained while your organisation account is active so you can run your service. As the platform provider we do not impose a fixed automatic purge period on that customer-owned operational data; default retention is for the life of the account. Where we offer organisation-level retention settings, you may configure a shorter period. It is your responsibility as the business using the Service to decide a retention policy that meets your own needs and data-protection obligations (see our Terms of Service).

Crash telemetry is retained for 30 days. That period is set by Sentry’s plan, not chosen by us.

To ask us to delete data we hold, see Request deletion of your data.

Request deletion of your data

This section explains how to ask Easy Days Work / Meddalwedd Am Byth Ltd to delete your personal data. It applies to the Easy Days Work app (including Google Play listings) and to data we hold for your organisation account.

How to request deletion

Email privacy@easydays.work with the subject line Request deletion of your data.
Include your account email (the login used in the product app) and your organisation name.
Optionally include any other details that help us identify the account (for example the name on the subscription or a recent invoice reference).

We will verify the request (for example by confirming control of the account email) before acting. We aim to complete verified deletion requests within one month, subject to the retention exceptions below.

What we typically delete after a verified request (or after account closure where deletion is requested):

Login and account data (for example authentication records in Amazon Cognito)
Organisation application data you entered in the product (customers, sites, visits, photos, signatures, and similar operational records)
Contact-form submissions tied to you where we no longer need them to handle the request or a related enquiry
The mapping we hold between your account and any pseudonymous crash-telemetry identifier (crash events themselves age out under Sentry’s retention)

What we typically keep (and for how long):

Billing, invoicing, and accounting records needed to meet legal and accounting obligations, typically retained for up to six years under UK company and tax rules
Records we must keep to establish, exercise, or defend legal claims, or to comply with a lawful request
Residual copies held by subprocessors under their own retention schedules until those copies are purged in the normal course of their service

Deletion is handled by contacting us as described above. Self-serve organisation erasure in the product is not required to use this process.

Your rights

If you are in the UK or EEA, you may have the right to access, correct, delete, or restrict processing of your personal data, to object, to withdraw consent where processing is based on consent, and to data portability where applicable.

Contact privacy@easydays.work to exercise these rights, or follow Request deletion of your data for erasure specifically. For general product enquiries, use enquiries@easydays.work.

You may also lodge a complaint with the UK Information Commissioner’s Office (ico.org.uk).

Data security

We use appropriate technical and organisational measures to protect your data. No method of transmission over the Internet is completely secure.

Third-party links

The Website may link to third-party sites (for example the product app, Stripe, or accounting software providers). Their privacy practices are their own.

Children’s privacy

The Website and product are not aimed at children under 13. We do not knowingly collect data from children.

Changes

We may update this policy. The effective date at the top will change when we do.

Contact us

Easy Days Work

Meddalwedd Am Byth Ltd (company number 16947505)
ICO registration ZC167809

International House, 10 Churchill Way, Cardiff, United Kingdom, CF10 2HE

Privacy: privacy@easydays.work
Enquiries: enquiries@easydays.work