Privacy policy
Privacy policy
Hall Accounts software and website · Last updated [date]
Highlighted words need filling in before this is published. Have it checked by a solicitor or adviser before launch.
1. Who we are
This policy explains how [Business or trading name] ("we", "us") collects and uses personal data when you visit [website address], buy or renew a licence for Hall Accounts, or contact us for support. We are the data controller for this information.
Contact: [Name], [Business address], [Contact email]. [Our ICO registration number is ZA000000 / We are exempt from the ICO data protection fee.]
2. The records you keep in Hall Accounts stay with you
Hall Accounts runs on your own computer. The accounts, entries, receipts, hirers' names and other records you type into it are saved on that computer, and in any backup files you choose to make. They are never sent to us, and we cannot see, access or recover them.
Your charity is the data controller for those records and is responsible for keeping them secure and for meeting its own data protection duties. We do not act as your data processor because we never handle them.
Licence check. [When the app checks a licence online, it sends only the licence key, the app version and the date of the check. It sends none of your accounts data.]
If you send us a file for support. If you choose to send us a backup file or screenshot to help resolve a problem, we use it only to help you, keep it securely and delete it within [30] days of resolving the problem.
3. What we collect
- When you buy or renew: your name, email address, organisation name (for example your charity), billing address, licence key, what you bought and when, and renewal dates. Card or bank details are taken by our payment provider, [Paddle / Stripe / Lemon Squeezy], and are not seen or stored by us.
- When you contact us or register interest: your name, email address, your organisation and role, and what you tell us in your message.
- When you visit the website: technical information such as your IP address, browser type and pages visited, recorded by our web host for security and to keep the site working. [We use only cookies that are essential for the site to work. / We also use [analytics tool] with your consent.]
- If you sign up for news: your email address and your choice to receive updates.
4. Why we use it, and our lawful basis
- To supply your licence, updates and support: because it is needed to perform our contract with you.
- To keep financial and tax records: because the law requires it.
- To send important notices about your licence, renewals and security updates, and to protect our website and software from misuse: in our legitimate interests.
- To reply when you register interest, and to send news and offers: with your consent, or as a customer in line with the rules on electronic marketing. You can unsubscribe at any time using the link in every email.
We do not sell your personal data, and we do not use it for automated decisions that affect you.
5. Who we share it with
- [Paddle / Stripe / Lemon Squeezy], which processes payments and may act as the seller of record for tax purposes, under its own privacy policy.
- [Cloudflare], our website host, and [email provider], which store data for us under contract.
- Our professional advisers, such as an accountant, where needed.
- Authorities such as HMRC, if the law requires it.
Some of these providers may store data outside the UK. Where they do, we make sure suitable safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement.
6. How long we keep it
| Record | How long |
|---|---|
| Purchase and invoice records | 6 years after the end of the financial year they relate to, as HMRC requires |
| Licence records | While your licence is active and for [2] years after it ends, so we can help if you return |
| Support emails and interest registrations | [2] years after the last contact |
| Marketing list | Until you unsubscribe |
| Website logs | [90] days |
7. Your rights
You have the right to ask for a copy of your personal data, to have it corrected, deleted or restricted, to object to our use of it, to have it transferred to you in a common format, and to withdraw consent at any time. To make a request, email [Contact email]. We will respond within one month and there is normally no charge.
If you are unhappy with how we have handled your data, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk, telephone 0303 123 1113.
8. Security
We keep the personal data we hold on secure, password-protected systems with access limited to those who need it. Because your accounts records stay on your computer, please keep that computer and any backup files secure.
9. Children
Our website and software are intended for adults acting for charities and other organisations. We do not knowingly collect data from children.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed, and we will tell customers by email about any significant change.
