Privacy Policy

This Privacy Policy describes how Aasure Ltd ("Aasure", "we", "us", or "our") collects, uses, stores, and protects your personal data when you use our platform, website, and related services (collectively, "the Service"). Aasure is registered in England and Wales and operates in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you must not use the Service.

1.Who we are

Aasure Ltd is the data controller for personal data collected through the Service. Our registered address and contact details are available at aasure.app. For any data-related queries, you may contact us at hello@aasure.app.

2.Data we collect

We collect the following categories of personal data:

• Account and identity data: your name, email address, password (stored in encrypted form), business name, and contact number.
• Business operational data: bookings, invoices, client records, revenue data, and communications you create or import through the Service.
• Usage data: how you interact with the Service, features used, pages visited, session duration, and device and browser information.
• Payment data: billing name, address, and payment method details. Card numbers are processed by our third-party payment provider and are not stored on our servers.
• Communications data: any messages, feedback, or support requests you send to us.
• Technical data: IP address, login timestamps, error logs, and system performance data necessary to maintain the security and integrity of the Service.

3.How we use your data

We use your personal data only for the following lawful purposes:

• To provide, maintain, and improve the Service you have subscribed to.
• To process payments and manage your subscription.
• To send essential service communications including security alerts, billing notices, and updates to these policies.
• To respond to support requests and resolve technical issues.
• To detect, investigate, and prevent fraudulent activity, security breaches, and misuse of the Service.
• To comply with our legal obligations under applicable UK law.
• To improve and develop new features of the Service, using anonymised and aggregated data only.

We do not use your personal data for advertising purposes. We do not sell, rent, or trade your personal data to any third party for commercial gain.

4.Legal basis for processing

We process your personal data under the following legal bases as defined in UK GDPR:

• Contract performance: processing necessary to deliver the Service you have agreed to receive.
• Legal obligation: processing required to comply with applicable law.
• Legitimate interests: processing necessary for our legitimate interests in operating a secure, functional, and improving service, provided those interests are not overridden by your rights.
• Consent: where you have given specific, informed consent to a particular use of your data, such as receiving marketing communications. You may withdraw this consent at any time.

5.Data storage and security

Your data is stored within your chosen region. UK users' data is stored on servers located within the United Kingdom or European Economic Area. We implement industry-standard technical and organisational security measures including encryption in transit and at rest, access controls, and regular security audits to protect your data against unauthorised access, disclosure, alteration, or destruction.

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and you use the Service at your own risk in this regard. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the Information Commissioner's Office (ICO) as required by UK GDPR.

6.Data retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Upon termination of your account, we will retain your data for a period of 90 days to allow for account recovery, after which it will be permanently deleted from our systems, unless we are required to retain it for longer to comply with a legal obligation or to resolve a dispute.

Aggregated, anonymised data derived from your usage may be retained indefinitely for the purpose of improving the Service and does not constitute personal data.

7.Sharing your data

We do not share your personal data with third parties except in the following limited circumstances:

• Service providers: we share data with trusted third-party providers who process it on our behalf, including cloud infrastructure providers, payment processors, and email delivery services. All such providers are bound by data processing agreements and are prohibited from using your data for any purpose other than delivering the contracted service.
• Legal requirements: we may disclose your data if required to do so by law, court order, or regulatory authority, or where we believe in good faith that disclosure is necessary to protect our legal rights, prevent fraud, or ensure the safety of our users.
• Business transfers: in the event of a merger, acquisition, or sale of all or substantially all of our assets, your data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

We do not share your personal data with third parties for their own marketing or commercial purposes under any circumstances.

8.Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right of access: you may request a copy of the personal data we hold about you.
• Right to rectification: you may request correction of inaccurate or incomplete data.
• Right to erasure: you may request deletion of your personal data in certain circumstances.
• Right to restriction: you may request that we restrict processing of your data in certain circumstances.
• Right to data portability: you may request your data in a structured, commonly used, machine-readable format.
• Right to object: you may object to processing based on legitimate interests or for direct marketing purposes.
• Rights related to automated decision-making: you have the right not to be subject to decisions based solely on automated processing that produce significant effects on you.

To exercise any of these rights, please contact us at hello@aasure.app. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request. If you are not satisfied with our response, you have the right to lodge a complaint with the ICO at ico.org.uk.

9.Cookies

The Service uses cookies and similar tracking technologies to maintain session state, remember your preferences, and analyse usage patterns. Essential cookies are necessary for the Service to function and cannot be disabled. Non-essential analytical cookies are used only with your consent, which you may withdraw at any time through your browser settings or our cookie preference centre.

We do not use third-party advertising cookies. We do not permit third-party advertising networks to place cookies through our Service.

10.Third-party links

The Service may contain links to third-party websites or integrations with third-party services. This Privacy Policy applies solely to the Aasure Service. We are not responsible for the privacy practices of any third-party website or service and we encourage you to review their privacy policies independently.

11.Children's privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a minor, please contact us immediately at hello@aasure.app and we will take steps to delete it.

12.Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or applicable law. We will notify you of material changes by email or by posting a prominent notice within the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Policy. If you do not agree to the updated Policy, you must discontinue use of the Service.

13.Contact

For any questions, concerns, or requests relating to this Privacy Policy, please contact us at hello@aasure.app or by post to Aasure Ltd, United Kingdom. We aim to respond to all privacy-related enquiries within 5 business days.