Legal

Privacy policy

Last updated 17 October 2026

This policy explains what personal data ISHE CO HOLDINGS LIMITED collects through this website and through the company's internal social media publishing tool, why, who else handles it, how long it is kept and what rights you have. Each of the company's products also has its own privacy policy, published on that product's website, covering that product in detail.

Who we are

The data controller is ISHE CO HOLDINGS LIMITED, trading as The Ishe Co ("we", "us"), a company registered in England and Wales with company number 16846136. Registered office: Office 9667, 182-184 High Street North, East Ham, London, E6 2JA, United Kingdom. For anything about your data, write to hello@theishe.online. We are not required to appoint a data protection officer and have not done so; the director, Isheanesu Misi, is responsible for data protection.

In short

• This website sets no cookies, uses no local storage, loads no third-party scripts and runs no analytics, advertising or tracking.
• If you email us, we use what you send to reply.
• Our publishing tool connects only to the company's own social media accounts, and uses what those platforms return only to publish and measure the company's own content.
• We do not sell personal data, and we do not use it for advertising or to train AI models.

1. Visiting this website

The site is a set of static pages served by Cloudflare. To deliver a page, Cloudflare necessarily receives your IP address, browser user agent, the page requested and the referring page, and keeps request logs for a short period for diagnosing faults and abuse. We do not add any analytics, counters, cookies, local storage, fonts or scripts from anyone else. If we ever add analytics, we will update this policy first.

Lawful basis: legitimate interests (UK GDPR Article 6(1)(f)) in delivering the site securely.

2. Contacting us

If you email hello@theishe.online, we receive your email address, your name if you include it, and whatever you write, and we use it to reply and to keep a record of the conversation. Lawful basis: legitimate interests in answering correspondence, or steps taken at your request before entering into a contract (Article 6(1)(b)).

3. Ishe Co Publisher, our social media publishing tool

The company publishes posts and videos about its own products to its own accounts. It does this with Ishe Co Publisher, an internal publishing tool used only by the company's staff, which connects through each platform's official API:

What the tool receives

• access and refresh tokens for the company's own accounts, granted by a company administrator through each platform's sign-in and consent screen;
• the identifiers, names and profile images of the company's own accounts, pages and channels;
• information about the company's own posts and videos, such as their status, publish time, views, reactions and comments.

How it uses that data

• only to publish, schedule and manage the company's own brand content, and to measure how that content performs;
• never to collect data about other users for profiling, advertising or resale;
• never to train artificial intelligence or machine learning models;
• never shared with anyone except the processors listed below, as the law requires, or as part of a merger or acquisition.

Comments that members of the public post on the company's own content are read only so that we can see and respond to them, under our legitimate interests in running our own accounts (Article 6(1)(f)). Each platform is a separate controller of the data on its own service, under its own privacy policy.

Tokens and disconnection

We commit that the publishing tool encrypts access and refresh tokens at rest, with a key held separately from the database that stores them, and that only the tool's own server code can read them. When an account is disconnected, the tool will revoke its tokens with the platform where the platform offers revocation, and delete them from our systems along with the cached account details. You can also remove the tool's access at any time from the platform's own settings, for example Google account permissions, Facebook and Instagram "Business integrations", or TikTok "Manage app permissions".

Google API Services

The Ishe Co's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data received from Google APIs (YouTube) is used only to provide the publishing feature described above; it is not transferred to others except as necessary to provide that feature, to comply with applicable law, or as part of a merger, acquisition or sale of assets; it is not used for advertising, including personalised, retargeted or interest-based advertising; and it is not read by any person except with consent, for security purposes, to comply with law, or where it has been aggregated and anonymised for internal operations.

The publishing tool uses YouTube API Services. By using it with a YouTube channel you are also bound by the YouTube Terms of Service, and Google's handling of data is described in the Google Privacy Policy.

4. Payments

Where one of our products takes payment, it is processed by Stripe. We never see or store your full card number. Stripe sends us records of payment events, which can include your name, email address, billing address, the type and last four digits of your card, amounts and Stripe's own identifiers. Lawful basis: performance of a contract (Article 6(1)(b)) and, for keeping accounting records, legal obligation (Article 6(1)(c)).

5. Cookies

This website sets no cookies and stores nothing on your device, so no cookie banner is shown.

Who else handles your data

We use the following service providers, each acting as our processor under a written contract:

The social media platforms listed above receive the content we publish to them and are controllers of their own services. We may also disclose personal data where the law requires it, or to a buyer of the business, who would be bound by this policy.

International transfers

Some of these providers are based in, or process data in, the United States and other countries outside the UK. Where that happens, the transfer is protected by the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, or by the UK-US data bridge where the recipient is certified under it. You can ask us for a copy of the relevant safeguards.

How long we keep it

Your rights

Under the UK GDPR and the Data Protection Act 2018 you have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data erased;
• restrict how we use it;
• object to processing based on legitimate interests, and to direct marketing at any time;
• receive data you gave us in a portable format;
• withdraw consent at any time, without affecting processing that took place before.

To use any of these rights, email hello@theishe.online. We will answer within one month, and there is no charge. We do not make decisions about you by automated means that have legal or similarly significant effects. How to have your data deleted is set out on the data deletion page.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority: ico.org.uk/make-a-complaint, telephone 0303 123 1113.

Security

The site is served over HTTPS only, with a strict content security policy. Secrets and encryption keys are held in the hosting provider's encrypted secret store rather than in source code, and access to the publishing tool is limited to the company's staff.

Children

Our products and this site are not directed at children. We do not knowingly collect personal data from anyone under 13. If you believe a child has given us their data, write to us and we will delete it.

Changes to this policy

When what we collect or how we use it changes, we update this page and the date at the top.