Privacy Notice

Who controls your data

Information we collect

We collect account details such as name, email address, password authentication data and email verification records; business profile details such as business name, trading name, business type, Companies House number, tax and registration information you provide; task activity, reminder settings, support messages, audit records and billing status.

How we collect information

We collect information when you create an account, complete onboarding, update settings, use task features, contact support, accept legal terms, subscribe through Stripe, or when security and operational systems create necessary records.

How we use information

We use personal information to provide and secure accounts, generate and update task lists, send service emails and reminders, manage support, process subscriptions, maintain audit trails, improve the Service, prevent misuse and meet legal or operational obligations.

Lawful bases

Our UK GDPR lawful bases may include contract where processing is needed to provide the Service, legitimate interests in running and improving Business Sorted and keeping it secure, legal obligation where records must be kept, and consent where required for optional marketing or non-essential cookies.

Billing and subscriptions

Stripe processes payments and card information. Business Sorted stores Stripe customer, subscription and price identifiers, billing interval, subscription status, current period dates, cancellation status and billing event history. We do not store complete card details.

Analytics, cookies and communications

We use essential cookies for authentication and security, internal product analytics, and Nadine Analytics for privacy-conscious public website usage. We may send service emails about account access, verification, security, billing, reminders and important Service changes. Marketing messages, where used, will provide any required unsubscribe route.

Processors and transfers

We use service providers to host the application, database, authentication, email, analytics and payments. Those providers may process personal information for us and may transfer data outside the UK. Where relevant, we rely on appropriate safeguards such as UK-approved contractual terms or provider transfer mechanisms.

Retention and security

We keep personal information only for as long as needed for the Service, support, billing records, security, audit, legal and operational requirements. We use technical and organisational measures intended to protect personal information, but no online service can guarantee absolute security.

Your rights

You may have rights to access, correct, delete, restrict or object to processing of your personal information, and to data portability where applicable. Contact support@businesssorted.uk to make a request. We may need to verify your identity before responding.

Complaints, children and changes

Business Sorted is not intended for children. If you have concerns about our use of personal information, contact us first and we will try to help. You also have the right to complain to the Information Commissioner's Office. We may update this Privacy Notice, and the version and effective date shown on this page identify the current notice.