Privacy policy

4. Sharing Your Personal Data

We may share your personal data with:

Service Providers (Processors)

Including providers of:

• Hosting and infrastructure (Azure, AWS, Cloudflare)
• Product analytics (Segment, Amplitude)
• Website analytics (Google Analytics)
• Customer support systems (Zendesk)
• Marketing automation (Customer.io, Salesforce)

Professional Advisers

Lawyers, auditors, insurers, and consultants.

Authorities

Regulators such as HMRC and the ICO, where required.

Business Transfers

In connection with mergers, acquisitions, or asset sales.

Sub‑processors

We maintain a list of our current sub‑processors, including their locations and purposes, at: https://docs.squaredup.com/billing-subscriptions/policies/data-sub-processors

All third parties are required to respect the security of your personal data and process it in accordance with the law.

5. International Transfers

Some of our service providers are located outside the UK and the European Economic Area (EEA), including in the United States.

When we transfer your personal data internationally, we ensure an equivalent level of protection by using one or more of the following safeguards:

• Transfers to countries with an adequacy decision
• Standard Contractual Clauses (SCCs) approved by the European Commission
• The UK International Data Transfer Agreement (IDTA) or UK Addendum
• Transfers to organisations certified under the EU–US Data Privacy Framework
• Transfer Risk Assessments (TRAs) where required

Categories of data transferred may include account data, telemetry data, analytics data, and support information.

Our sub‑processor list (including international locations) is available at: https://docs.squaredup.com/billing-subscriptions/policies/data-sub-processors

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption in transit and at rest
• Access controls and least‑privilege principles
• Monitoring and security testing
• Incident response procedures

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, regulatory, tax, accounting, or reporting requirements.

When determining how long to retain personal data, we consider:

• the nature and sensitivity of the data
• the purposes for which we process it
• whether we can achieve those purposes through other means
• applicable legal, regulatory, or contractual requirements
• the potential risk of harm from unauthorised use or disclosure

In general:

• We retain customer and account‑related information for as long as you maintain an active relationship with us and for a reasonable period afterwards to comply with legal obligations or to resolve disputes.
• We retain enquiry, support, and communication data for as long as necessary to respond to your request and manage our relationship with you.
• We retain marketing data until you withdraw your consent or object to receiving such communications.
• We retain product usage and analytics data only for as long as needed to support service operation, security, troubleshooting, and product improvement, after which it is deleted or anonymised.

In some circumstances, we may anonymise personal data so that it can no longer be associated with an identifiable individual. We may use such anonymised information indefinitely without further notice.

8. Your Legal Rights

You have rights under data protection law, including:

• Access to your personal data
• Correction of inaccurate data
• Erasure of your data
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent

You may lodge a complaint with the UK Information Commissioner’s Office (ICO).

9. Third‑Party Links

Our websites may include links to third‑party websites. We are not responsible for their privacy practices.

10. Contact Us

If you have any questions about this policy or wish to exercise your rights, please contact us:

Squared Up Ltd Email: [email protected]

Telephone: +44 (0) 1628 947 847

Postal address: Pearce Building West Street Maidenhead SL6 1RL United Kingdom

11. Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated revision date. Where appropriate, we will notify you of significant changes.