Data We Collect

• Provided by you: usernames, emails, passwords, business details, payment details (processed by third-party partners), service data you input/upload, and communications with us.
• Collected automatically: IP address, device/browser details, server logs, usage information, and limited cookies (no third-party advertising tracking).
• Business transactions: invoice/payment records, bank details for suppliers.

How We Use Your Data

• Contract performance: account setup, service delivery, payment processing, customer support.
• Legitimate interests: service improvement, security, marketing to existing customers, business analytics.
• Legal compliance: tax, financial, employment, and data protection obligations.
• Consent: for marketing to non-customers, non-essential cookies, or other optional uses.
• Vital interests: only in emergencies to protect life/health.

Sharing and Storage

• We never sell your data.
• Shared only with trusted service providers (e.g., payment processors, hosting, email services) under strict contractual terms, or where required by law.
• Data is stored in the UK/EEA or with providers offering equivalent protections.

Security

Encryption, multi-factor authentication, access controls, and regular security assessments are used to protect your data.

Retention

• Account data: until deletion plus 30 days.
• Business/payment records: 7 years.
• Logs: 12 months.
• Marketing data: until you unsubscribe plus 3 years.

Your Rights (UK GDPR)

• Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.
• No automated decision-making or profiling currently in use.
• Requests processed within one month (extensions possible for complex cases).

International Transfers

• Primarily stored in UK/EEA.
• Where transferred abroad, we use adequacy decisions, UK-approved Standard Contractual Clauses, and other safeguards.

Cookies

Only essential, performance, and functional cookies are used; no advertising trackers.

Children’s Privacy

Services are not for under-13s; we delete any such data found.

Breach Notification

We notify affected users within 72 hours if a breach poses high risk to rights and freedoms. For full details on how we handle your personal data, including how to exercise your rights, please refer to the full Privacy Policy located at [link].