Privacy & Cookie Policy

Last updated: April 2026

Settleby Ltd
Registered in England and Wales
Company number: 15107426

1. Introduction

This Privacy & Cookie Policy explains how Settleby Ltd ("Settleby", "we", "us", "our") collects, uses, and protects personal data when you use the Settleby platform ("Platform") or visit our website.

Settleby is committed to protecting your privacy and handling personal data in accordance with:

• UK GDPR
• Data Protection Act 2018

2. Data Controller

Settleby Ltd is the data controller for personal data processed through the Platform.

If you have any questions about this policy, you can contact:

hello+policy@settleby.com

3. Personal Data We Collect

We collect personal data necessary to operate the Platform.

3.1 Trade (Business) Data

• Name and contact details
• Business name and address
• Company registration details
• Email and phone number
• Job and transaction data

3.2 Customer Data

• Name and contact details
• Email address
• Job-related information
• Payment-related information (processed via Stripe)

3.3 Payment Data

All payments are processed by Stripe.

Settleby does not:

• Store card numbers
• Store bank account credentials

Stripe acts as an independent data controller for payment data.

3.4 Usage Data

• Platform interactions
• Login activity
• Device and browser information
• IP address

3.5 Communications Data

• Emails sent via the Platform
• Customer satisfaction responses
• Support enquiries

4. How We Use Personal Data

We use personal data to:

• Provide and operate the Platform
• Facilitate payments and settlement workflows
• Communicate with users
• Maintain security and prevent fraud
• Improve platform functionality

We do not sell personal data.

5. Legal Basis for Processing

We process personal data under the following legal bases:

• Performance of a contract (providing Platform services)
• Legitimate interests (platform operation and fraud prevention)
• Legal obligations (where required)

6. Sharing of Data

We share personal data only where necessary.

6.1 Payment Processing

• Stripe processes payments and related data

6.2 Infrastructure Providers

We use trusted providers for:

• Cloud infrastructure (Google Cloud Platform)
• Email delivery (Resend)

6.3 Legal & Compliance

We may disclose data:

• Where required by law
• To enforce legal rights
• To prevent fraud or abuse

7. Data Retention

We retain personal data only as long as necessary to:

• Provide services
• Maintain financial records
• Comply with legal obligations

Retention periods vary depending on the type of data.

8. Data Security

We implement appropriate technical and organisational measures, including:

• Secure infrastructure within private network environments
• Encryption in transit (TLS)
• Access controls and authentication
• Audit logging and monitoring

Payment data security is handled by Stripe.

9. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (where applicable)
• Restrict or object to processing
• Request data portability

To exercise your rights, contact:

hello+gdpr@settleby.com

10. Cookies & Tracking

10.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website.

10.2 How We Use Cookies

We use cookies and similar technologies to:

• Enable core platform functionality
• Maintain session state
• Improve user experience

We do not use cookies for selling personal data.

10.3 Types of Cookies Used

Essential Cookies

• Required for platform operation
• Authentication and session management

Analytics Cookies (if enabled)

• Help understand usage patterns
• Improve platform performance

10.4 Managing Cookies

You can control cookies through your browser settings.

Disabling essential cookies may affect platform functionality.

11. Third-Party Services

We rely on third-party providers, including:

• Stripe (payments and compliance)
• Google Cloud Platform (infrastructure)
• Resend (email delivery)

These providers may process personal data as independent controllers or processors.

12. International Data Transfers

Where personal data is processed outside the UK, appropriate safeguards are applied in accordance with data protection laws.

13. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time.

Updates will be published on the website.

14. Contact

Settleby Ltd
Email: hello+policy@settleby.com