Privacy
Privacy notice
Last updated: 29 July 2026
Aboveboard ("we", "us") provides an Ad Safety & Conversion Scan for UK dental practices. We take your privacy seriously — the work we do involves your commercial materials and we treat them accordingly. This notice explains what we collect, how we use it, and how long we keep it.
What you give us
- Booking details — practice name, your name, email, optional phone, and any notes you add at booking.
- Payment — card details are entered directly into Stripe and never reach our servers. We receive only a transaction reference and the amount.
- Your uploaded assets — screenshots, PDFs, recordings, and landing-page URLs you send via the private upload link after payment.
Where it lives
Your booking record sits in a small, access-controlled database (UK / EU region) used only to run this service. Uploaded files are written to a private, server-side store and then downloaded to a single offline working machine for the review itself — they are not retained long-term in any third-party cloud.
What we will never do
- Share your ads, materials, or contact details with any third party.
- Use your materials to train AI models — ours, anyone else's.
- Run analytics, heatmaps, or trackers on uploaded files.
- Sell, swap or rent your details for marketing.
How long we keep it
- Uploaded files on the server: wiped within 24 hours of delivering your report.
- Local working copies: deleted within 30 days of delivery, unless you ask us to retain them for a follow-up engagement.
- Booking record (name, email, invoice reference): retained for 6 years for UK tax / accounting purposes.
Your rights (UK GDPR)
You can ask us to confirm what we hold, correct it, delete it, or send you a copy, at any time. Email hello@above-board.co.uk and we will respond within 30 days. You can also complain to the ICO at ico.org.uk.
Sub-processors we use
- Stripe — card payments. Subject to Stripe's own privacy policy.
- Lovable Cloud (Supabase, EU region) — database and short-lived encrypted file storage for the booking + upload flow.
- Email provider — to send your report and any service emails.
Cookies
This site does not set marketing or analytics cookies. The only cookies in play are strictly necessary ones used by the secure payment iframe.