Privacy notice
Last updated 27 October 2026
This notice explains how Noteleaf collects, uses, stores and protects personal information, and the rights people have over it. It is written to meet Articles 13 and 14 of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
In brief
- We hold only what is needed to show messages on a Noteleaf screen, run the service, and sell and support Noteleaf devices.
- Messages and reminders can include health information. We store it only with explicit consent.
- Information is stored by our hosting provider, Render, in the United States, under safeguards approved by UK law.
- We never sell personal information, and never use it for advertising or profiling.
- A family can have everything about their Noteleaf deleted at any time.
- Questions, requests and complaints: notablesecurity@gmail.com.
1. Who we are
Noteleaf (“Noteleaf”, “we”, “us”, “our”) is a trading name of Ari Patel, a sole trader based in London, England. Ari Patel is the controller of the personal information described in this notice, which means he decides how and why it is used and is responsible for it.
- Controller: Ari Patel, trading as Noteleaf
- ICO registration number: ZC276908
- Email: notablesecurity@gmail.com
Ari Patel is personally responsible for data protection at Noteleaf and handles every privacy request and complaint.
This notice covers the Noteleaf website, Noteleaf devices, each family’s private Noteleaf page, our waitlist, and our sales and support.
2. Whose information this notice covers
- Users: family members, friends and carers who set up a Noteleaf or add content through its private page.
- The Recipient: the person a Noteleaf screen is set up for.
- People mentioned in content: for example, a relative whose birthday a User adds.
- Customers: people who buy a Noteleaf.
- Other people: those who join our waitlist, visit our website or contact us.
3. Information we collect
| Category | What it includes | Where it comes from |
|---|---|---|
| Screen content | Messages and status text; reminders (text, times, how often they repeat); occasions (a name, a date and any note); and to-do tasks (the text, an optional time, the day it is for, how often it repeats, and when it was ticked) | Users, through the private page |
| Weather location | A place name and the approximate map coordinates it is converted to | Users |
| Device and service data | Device identifier, setup code, screen model, software version, check-in times, delivery status, and the internet (IP) address of the network the device connects from | The Noteleaf device, automatically |
| Page and website data | IP address, browser type and time of visits to our website and private pages, held in server logs | Your browser, automatically |
| Consent records | The date, time and version of the consent statement agreed on a private page | Users |
| Customer information | Name, delivery address, email address, phone number if given, order details, and confirmation of payment (for bank transfers, the payer’s name and the account details shown on the transfer; never card details) | Customers, our bank and our card payment provider |
| Waitlist information | First name, email address, who the Noteleaf would be for, when it would be wanted, whether you want updates, and the time you signed up | The person signing up |
| Correspondence | The content of emails and messages sent to us | The sender |
What we do not collect. Your Wi‑Fi password is stored only on the device and is never sent to us. Noteleaf devices have no camera, microphone or location tracking. The Recipient does not need an account. We never see or store full card numbers.
4. Health information and the Recipient
Messages, reminders and to-do tasks can reveal information about someone’s health, such as a medical appointment, a reminder to take medicine or a task like “Pick up the prescription”. The fact that a family uses Noteleaf may also suggest that the Recipient has a memory condition. UK law treats health information as “special category” data, which needs extra protection.
Explicit consent. We process health information only with explicit consent (Article 9(2)(a) UK GDPR). Before any content can be added to a private page, the User must agree to this statement:
“I agree to Noteleaf storing what I type, which may include health information about the person the screen is for. I confirm that they have agreed to this, or that I have legal authority to agree on their behalf.”
Legal authority means, for example, being the Recipient’s attorney under a registered Lasting Power of Attorney for health and welfare, or a deputy appointed by the Court of Protection. We may ask for evidence of that authority.
If neither applies, please do not enter health information. Noteleaf works without it: “Sarah visits at 2pm” rather than a medical detail. We record when consent was given and to which version of the statement.
Withdrawing consent. Consent can be withdrawn at any time by emailing us, without affecting anything done before. We will then delete the content on that Noteleaf’s page. Users can also delete individual items themselves at any time.
If you are the Recipient. Your family set up Noteleaf to send you messages and reminders, so the information about you comes from them. You have the same rights as everyone else (section 11), and someone with legal authority can use them on your behalf. We ask Users to share this notice with you, and the setup card supplied with every Noteleaf points to it.
The screen is visible to anyone in the room. Users should only add content they are comfortable for visitors to see.
5. Why we use information, and our legal grounds
UK data protection law requires a lawful basis for each use of personal information (Article 6 UK GDPR), and a further condition for health information (Article 9).
| Purpose | Information used | Lawful basis | Condition for health information |
|---|---|---|---|
| Showing content on the screen, running the private page, showing the weather | Screen content, weather location, device and service data | Contract, where the User is the customer; otherwise legitimate interests in delivering the messages a family chooses to send | Explicit consent |
| Keeping Noteleaf secure and working: check-ins, offline alerts, fixing faults, preventing misuse | Device and service data, page and website data | Legitimate interests in a secure, reliable service | Not applicable |
| Recording consent | Consent records | Legal obligation to be able to show consent was given | Not applicable |
| Selling, delivering and supporting Noteleaf, including warranty claims and refunds | Customer information, correspondence | Contract | Not applicable |
| Keeping accounting and tax records | Customer information | Legal obligation | Not applicable |
| Telling waitlist members when Noteleaf is available, as they asked | Waitlist information | Legitimate interests | Not applicable |
| Sending occasional updates | Waitlist information | Consent (you can unsubscribe at any time) | Not applicable |
| Answering enquiries, rights requests and complaints | Correspondence and the information concerned | Legal obligation; otherwise legitimate interests | Explicit consent, or legal claims where relevant |
| Establishing, exercising or defending legal claims | Records relevant to the claim | Legitimate interests | Legal claims (Article 9(2)(f)) |
Where we rely on legitimate interests, we have weighed our interests against the rights of the people concerned. You can ask us for details of that assessment.
Do you have to provide information? No law requires you to. Without screen content, Noteleaf cannot show anything. Without customer information, we cannot sell or deliver a Noteleaf. The waitlist is optional.
Automated decisions. We do not make decisions about anyone using solely automated processing, and we do not profile anyone.
6. Who we share information with
We share personal information only with the organisations below, and only what each needs. Service providers act on our instructions under written terms that protect the information.
| Recipient | What they do for us | Information they receive | Where |
|---|---|---|---|
| Render Services, Inc. | Hosts the Noteleaf server and its storage | All information held by the Noteleaf service, the waitlist and server logs | United States (Oregon) |
| OpenWeather Ltd | Weather forecasts and place lookups | The weather location only; requests come from our server and are not linked to anyone’s name | UK company |
| ntfy LLC (ntfy.sh) | Sends alerts to our phone when a device goes offline or someone joins the waitlist | A short device code and alert text only; no names, messages or contact details. ntfy deletes messages after 12 hours | United States |
| Email (Gmail), and fonts on our web pages | Emails you send us; your IP address when a page loads its fonts | United States and elsewhere | |
| Our bank, and Stripe | Bank transfers and card payments | Payment and order details, including the payer’s name and account details for bank transfers | UK and United States |
| Royal Mail Group Ltd | Delivery | Name and delivery address | UK |
| Professional advisers | Accountancy, legal and insurance advice, when needed | Only what the matter requires | UK |
The software tools we use to build and repair Noteleaf, including AI assistants, may process technical information such as device codes and error logs. We do not put the content of messages, reminders, occasions or to-do tasks into these tools.
We disclose information to the police, HMRC, a court or another authority only where the law requires it. If the Noteleaf business is ever transferred to a new owner, we will tell customers first and give them the chance to close their account; the new owner would be bound by this notice.
We never sell or rent personal information, and never share it for advertising.
7. International transfers
Our server is hosted by Render Services, Inc. in Oregon, United States, so information held by the Noteleaf service is transferred outside the UK. That transfer is protected in two ways:
- Render is certified under the UK Extension to the EU‑US Data Privacy Framework. UK law treats transfers to certified organisations as adequately protected.
- As a fallback, Render’s data processing addendum includes the UK International Data Transfer Addendum to the European Commission’s standard contractual clauses.
Render encrypts data in transit and at rest. Where our other providers transfer information outside the UK, they rely on the same kinds of safeguards. You can ask us for details of any safeguard.
8. How long we keep information
We keep information only as long as we need it for the purposes in section 5, then delete it.
| Information | How long we keep it |
|---|---|
| Screen content and weather location | Until a User deletes it, or until the account is closed (section 9). A to-do task that has been ticked is also deleted automatically, about a week after it was ticked |
| Device and service data | Until the account is closed |
| Server logs | 7 days, then deleted automatically |
| Backup copies of the server | Made daily by Render and replaced on a rolling basis, currently after at least 7 days. We never restore deleted information from a backup, except to recover from an incident; if that happens, we delete it again |
| Consent records | While the account is open, and for 6 years after it closes, so we can show consent was given. They contain no screen content |
| Customer and order records | At least 5 years after the 31 January Self Assessment deadline for the tax year of the sale, as HMRC requires, and no longer than 7 years after the sale |
| Waitlist information | Until you ask us to remove you, you become a customer, or 24 months after you sign up, whichever comes first |
| Correspondence | 2 years after our last contact, unless it forms part of an order, complaint or legal claim, in which case it is kept with those records |
| Records of rights requests and complaints | 3 years after the matter is closed |
| Alerts sent through ntfy | Deleted by ntfy after 12 hours |
9. Closing an account
Asking us to close an account. The customer, or a User of that Noteleaf, can email us to close the account at any time. We may ask for information to confirm the request comes from someone entitled to make it.
What we delete. Within 7 days, and in any event within one month, we permanently delete the screen content, weather location, and device and service data for that Noteleaf, and its private page link stops working. We confirm by email when this is done. Copies in server logs and backups expire as set out in section 8.
What we keep. Customer and order records, consent records, and a record of the closure request, for the periods in section 8.
Inactive devices. If a Noteleaf has not checked in for 12 months, we email the customer. If we receive no reply within 30 days, we close the account as above.
Returning or passing on a Noteleaf. Tell us first. We will close the account and fully erase the device, which gives it a new identity and clears its screen. An e‑paper screen keeps showing its last image even when unplugged, so do not give the device away until it has been cleared. To remove your Wi‑Fi details yourself, hold the button on the back for 3 seconds.
If Noteleaf stops trading. We will email customers at least 30 days before the service ends, then delete all information except records the law requires us to keep.
10. Security
- All information travels over encrypted connections (HTTPS). Each Noteleaf checks it is talking to the genuine Noteleaf server before accepting any content or software update.
- Each private page has its own long, randomly generated link. We can replace a link if it has been shared too widely.
- Only Ari Patel can access Noteleaf’s systems, and every account involved is protected by two-step verification.
- Our hosting provider encrypts stored information.
Please keep your private page link to yourself and the people you trust. Anyone with the link can change what appears on the screen.
If something goes wrong. If a security incident affects personal information, we will report it to the ICO within 72 hours where the law requires, and tell the people affected without undue delay if it is likely to put them at high risk.
To report a security problem, email notablesecurity@gmail.com.
11. Your rights
You have the right to:
- access the personal information we hold about you and receive a copy;
- rectification of information that is inaccurate or incomplete;
- erasure of your information;
- restrict how we use your information;
- object to our use of your information where we rely on legitimate interests, and to object at any time to marketing;
- data portability: receive information you gave us in a reusable format, or have it sent to another organisation;
- withdraw consent at any time, where we rely on consent;
- not be subject to decisions based solely on automated processing (we make none).
Some rights apply only in certain circumstances; we will explain if one does not apply to your request.
How to use them. Email notablesecurity@gmail.com. There is no charge. We will respond without undue delay and within one month. If a request is complex or one of several, we may extend this by up to two further months, and will tell you why within the first month. We may ask you to confirm your identity, or to clarify your request; the time limit is paused until you reply. We may refuse, or charge a reasonable fee for, requests that are manifestly unfounded or excessive, and will explain why.
Acting for someone else. An attorney, deputy or other person with legal authority can use these rights on another person’s behalf. We may ask for evidence of that authority.
12. Complaints
Complaining to us. If you are unhappy with how we have handled personal information, please tell us at notablesecurity@gmail.com, or in any other way you prefer. We will acknowledge your complaint within 30 days, look into it, keep you informed, and tell you the outcome without undue delay.
Complaining to the ICO. You also have the right to complain to the UK regulator, the Information Commission (known as the ICO), at any time:
- Online: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
We would appreciate the chance to put things right first, but you do not need to contact us before going to the ICO.
13. Children
Noteleaf is not intended for anyone under 18 to buy, set up or join the waitlist. Content about a child, such as a grandchild’s birthday added by a User, is handled in the same way as any other content.
14. Cookies
Our website and private pages do not use advertising, analytics or tracking cookies. If we ever introduce a cookie that is not strictly necessary, we will ask for your permission first.
15. Changes to this notice
We review this notice regularly. If we make a change that affects how personal information is used, we will tell customers by email and show a notice on private pages at least 30 days before it takes effect. The date at the top shows when the notice was last updated.