Privacy Policy

SPECTBILL LTD ("we", company number 16395245) is the controller for personal data processed through SpectBill at https://spectbillltd.store, unless stated otherwise. Registered office: 39 Mill Lane, Portbury, Bristol, England, BS20 7TX.

1. Scope

This Privacy Policy explains how we collect, use, store, and share personal data when you visit our website, create an account, subscribe, or contact us. It is framed for UK GDPR and the Data Protection Act 2018.

2. Data we collect

• Account data: name, email, password hash, business profile details you enter.
• Client and document data: information you store about clients, invoices, quotations, line items, and payments.
• Billing data: subscription status and payment identifiers processed by our payment provider (we do not store full card numbers).
• Technical and usage data: IP address, browser type, device information, logs, and cookies as described in our Cookie Policy.
• Contact form: name, email, subject, and message content.

3. Purposes and lawful bases

• Provide and secure the Service — contract and legitimate interests.
• Process subscriptions — contract and legal obligation (tax records).
• Respond to enquiries — legitimate interests or contract.
• Optional analytics or marketing cookies — consent where required (see Cookie Policy).
• Comply with law — legal obligation.

4. Recipients and processors

We use infrastructure and service providers (hosting, email, payments, database) who process data on our instructions under appropriate contracts. We may disclose data if required by law or to protect rights and safety.

5. International transfers

If data is transferred outside the UK, we implement appropriate safeguards such as UK adequacy regulations or standard contractual clauses, as applicable at the time of transfer.

6. Retention

We retain account and document data while your account is active and for a reasonable period afterward for backups, disputes, and legal compliance. Contact messages are retained as long as needed to handle the enquiry.

7. Your rights

Under UK GDPR you may have rights to access, rectify, erase, restrict, object, and data portability, and to withdraw consent where processing is consent-based. You may lodge a complaint with the Information Commissioner's Office (ICO). Contact us via the Contact page to exercise rights.

8. Security

We implement technical and organisational measures appropriate to the risk, including access controls and encryption in transit where supported. No method of transmission is completely secure.

9. Children

The Service is intended for business users and is not directed at children under 18.

10. Changes

We may update this policy; the "Last updated" date will change and material changes may be notified where appropriate.