Controller and scope
Posturely is operated by Human Factors Connection Ltd (registered in Scotland, company number SC472053), with registered office at 9 Oldfold Crescent, Milltimber, Aberdeenshire, AB13 0JY.
Effective date: 2026-05-02.
This policy applies when you visit our site, create an account, upload workstation photos, request AI analysis, buy credits, subscribe, cancel, request a refund, or contact support.
The service is designed around workstation context. We do not ask for identity recognition, face identification, biometric matching, or sensitive health records.
Data we collect
We collect account details, email address, billing identifiers, support messages, product settings, workstation descriptions, uploaded workstation photos, generated report images, generated video outputs, credit usage, device metadata, and consent records.
Billing data can include Stripe customer identifiers, checkout session identifiers, subscription status, invoice references, refund events, dispute events, credit delivery records, and policy acceptance records. We do not store full card numbers.
We do not require you to upload photos of other people. If a person is visible, you must have permission to upload the image and must not use the service to identify or rank that person.
How we use data
We use data to provide ergonomic workstation analysis, generate report images and fix reels, operate billing and credits, prevent abuse, secure the service, answer support requests, maintain legal records, and improve product reliability.
Workstation photos are processed to produce your requested outputs. They are not used to train third-party foundation models unless you separately opt in through a clear written control.
Payment and support records are used to confirm delivery, process cancellations, evaluate refund requests, answer disputes, and keep tax and accounting records.
Legal bases and rights
For UK and EU GDPR users, our legal bases include contract performance, consent, legitimate interests, and legal obligations. You may request access, rectification, erasure, portability, restriction, or object to certain processing. To exercise any right, email privacy@ratcliffegroup.com from the email address linked to your account. We respond within one calendar month and do not charge for routine requests.
If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by phone on 0303 123 1113. EU residents may complain to their local supervisory authority.
For CCPA users in California, you may request access, deletion, correction, and information about categories of personal information. We do not sell or share your personal information for cross-context behavioural advertising.
International data transfers
Some of our processors (including Stripe, our hosting provider, and AI infrastructure partners) are located in the United States and other jurisdictions outside the UK and EEA. Where a transfer is made we rely on one of: (a) a UK adequacy regulation or EU adequacy decision, (b) the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, or (c) your explicit consent.
A current list of sub-processors and the lawful transfer mechanism applied to each is available on request from privacy@ratcliffegroup.com.
Retention, security, and processors
Account and billing records are retained for the life of your account plus the periods required by UK tax law (currently six years for VAT and accounting records). Uploaded workstation photos are retained for up to 90 days and then deleted, unless you remove them earlier through support. Generated reports and fix reels are retained for the duration of your active subscription. Consent and policy acceptance records are retained for two years after the consent is withdrawn.
We use payment (Stripe), hosting, storage, analytics, and AI infrastructure providers under written processor agreements. Posturely will not use your uploaded content to train any third-party foundation model, and will not use it to train Posturely's own models without separate, opt-in written consent.
When Stripe processes a payment, Stripe acts under its own processor and financial-services obligations. Please review Stripe's own privacy disclosures during checkout.
Questions can be sent to support@ratcliffegroup.com. For privacy or data protection requests, contact privacy@ratcliffegroup.com.