Privacy notice
This notice explains what personal data MyOfficeDesk collects, why, who we share it with and your rights. MyOfficeDesk is a tool that helps people set up and run a UK business. It is operated by Dwain Prendergast, a sole trader trading as MyOfficeDesk ("we", "us").
1. Who is responsible for your data
For your account and how you use MyOfficeDesk, Dwain Prendergast, a sole trader trading as MyOfficeDesk is the controller. You can contact us about privacy at hello@myofficedesk.app.
When you add information about your own customers, leads or staff (for example in the CRM, invoices or email drafts), you are the controller of that information and we process it on your behalf as your processor. Section 9 explains this.
2. What we collect
| Data | Where it comes from | Why we use it | Lawful basis |
|---|---|---|---|
| Name, email address, password (stored only as a salted, peppered hash), recovery code (stored only as a hash) | You, when you create an account | To create and secure your account and let you log in | Contract |
| Your workspace: business profile, roadmap progress, dates, CRM contacts, invoices, notes, drafts, qualifications, settings | You | To save your work and sync it across your devices | Contract |
| Session records (a hashed token, when it was created and expires, your browser's user agent) | Your browser, when you log in | To keep you logged in and let you log out everywhere | Contract; legitimate interests (security) |
| Temporary security counters keyed to your email address or IP address | Our server, when you log in, sign up or recover an account | To stop password guessing and abuse. They expire within an hour. | Legitimate interests (security) |
| Marketing preference | You, if you tick the box at sign-up | To send occasional product news. You can stop at any time. | Consent |
| Text you send to AI drafting or Desk AI | You | To produce the draft or answer you asked for | Contract |
| Company names or numbers you search for | You | To look up the public Companies House register | Contract |
If you use MyOfficeDesk without an account, your workspace stays in your own browser on your device. We do not receive it.
We do not sell your data, use it for advertising, or use it to train AI models.
3. Who we share it with
We use these providers to run the service. Each only processes data to provide their service to us.
| Provider | What for | Where |
|---|---|---|
| Cloudflare, Inc. | Our server, database, AI drafting (Workers AI) and content delivery | Database stored in Europe; requests handled on Cloudflare's global network |
| GitHub, Inc. | Hosting the website files | United States |
| Companies House (UK government) | Company lookups, only when you search | United Kingdom |
| Google LLC | Web fonts; video thumbnails and the YouTube player in the knowledge base | United States |
| RadioKing | The Business Radio stream, only when you press play | European Union |
When you use MyOfficeDesk inside the Claude app, AI requests are handled by Anthropic under your own Claude account terms. Emails you write in MyOfficeDesk open in your own email provider (such as Gmail or Outlook), which then handles them under its own terms. We do not send them for you.
Where a provider processes data outside the UK, we rely on the UK's adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the International Data Transfer Agreement or Addendum, as appropriate.
We may also disclose data if the law requires it, or to protect our rights or the safety of others.
Partner links. When you open a partner offer, such as Tide or Air Landline, you go to the partner's own website. The link or code tells them you came from MyOfficeDesk, so they can pay us a referral reward. We do not send them your name, email or workspace. Their privacy notice applies to anything you give them.
4. How long we keep it
- Account and workspace: until you delete your account. Deleting your account in Settings removes your account, workspace and sessions from our database straight away. Database backups held by our provider roll over within 30 days.
- Sessions: up to 90 days, or until you log out.
- Security counters: up to one hour.
- Marketing preference: until you unsubscribe or delete your account.
5. Security
Passwords are hashed with PBKDF2 and a secret pepper and are never stored or logged in plain text. Data travels over HTTPS. Only our website can call our server from a browser. Log-in, sign-up and recovery are rate limited. No system is perfectly secure, so please use a strong, unique password and keep your recovery code safe.
6. Your rights
Under UK data protection law you can ask to access, correct, delete, restrict or move your data, and object to how we use it. You can withdraw consent to marketing at any time. Much of this you can do yourself: export a copy of your workspace and delete your account in Settings. For anything else, email hello@myofficedesk.app. We reply within one month.
7. Complaints
Please contact us first so we can help. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.
8. Children
MyOfficeDesk is for people aged 18 and over who are setting up or running a business. We do not knowingly collect data from children.
9. Data you add about other people
If you store details of your customers, leads or staff in MyOfficeDesk, you are responsible for having a lawful basis to do so and for telling those people how you use their data. We process that data only to provide the service to you, only on your instructions, keep it confidential and secure, use the providers listed in section 3, help you respond to rights requests, delete it when you delete your account, and tell you without undue delay if a breach affects it. Our Terms set this out as a contract between us.
10. Changes
We will update this notice when our services or the law change and show the date at the top. If a change is significant, we will tell you in the app or by email.