Legal

GDPR Information

Last updated: 23 June 2026

Settlesol is committed to protecting your personal data and respecting your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This page explains your rights and how to exercise them.

Your rights at a glance

Right of access

You have the right to request a copy of the personal data we hold about you, along with information about how we use it. We will respond within 30 days.

Right to rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. You can update most information directly in your account settings.

Right to erasure ("right to be forgotten")

You have the right to request deletion of your personal data. We will delete your data within 30 days, except where we are required to retain it by law (e.g. billing records for 7 years under UK tax law).

Right to restriction of processing

You have the right to ask us to pause processing your personal data in certain circumstances, for example while a dispute is being investigated.

Right to data portability

You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format (JSON or CSV), and to transmit it to another controller.

Right to object

You have the right to object to processing of your personal data where we rely on legitimate interest as our legal basis. We will stop processing unless we can demonstrate compelling legitimate grounds.

Right to withdraw consent

Where processing is based on your consent (e.g. marketing emails), you can withdraw consent at any time by clicking "unsubscribe" in any email or emailing us.

How to exercise your rights

Email [email protected] with the subject line "Data Rights Request" and describe what you would like us to do. We will respond within 30 days. We may ask you to verify your identity before processing the request.

What data we hold about you

As a Settlesol subscriber, we hold:

Your name and email address
Your company name and contact details
Subscription and billing history (via Stripe)
Module run metadata (dates, status, row counts) — not the contents of your files
Team member details (names and emails of people you invite)
Server logs (IP address, browser, request metadata) — retained 30 days

We do not hold: the contents of any files you upload (invoice amounts, customer names, supplier names, financial figures). These are processed in memory only and never stored.

Legal basis for processing

Contract — we process account, billing and usage data because it is necessary to provide the service you have contracted for
Legitimate interest — we process usage metadata for platform security, fraud prevention, and product improvement
Legal obligation — we retain billing records for 7 years as required by UK law

How long we keep your data

Account data: duration of subscription + 90 days after cancellation
Billing records: 7 years (legal requirement)
Module run metadata: retained for the duration of your account, deleted upon account deletion request
Server logs: 30 days
Financial file contents: never stored

Supervisory authority

You have the right to lodge a complaint with the UK supervisory authority — the Information Commissioner's Office (ICO) — if you believe we have not handled your data correctly:

Website: ico.org.uk
Phone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF

We would appreciate the opportunity to address your concern directly before you contact the ICO. Please email us first at [email protected].

Submit a data rights request

Email us with your request and we will respond within 30 days. No forms to fill in — just send an email.

Email us →