Privacy Policy

1. Introduction

Business Dashboard ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

We are registered in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Personal Information

When you register for an account, we collect:

• Name and email address
• Business name and contact details
• Phone number (optional)
• Business address
• Payment information (processed securely via Stripe)

Business Data

In the course of using our service, you may provide:

• Customer contact information
• Invoice and estimate details
• Receipt images and expense data
• Booking and appointment information

Automatically Collected Information

We automatically collect certain information when you use our service:

• IP address and device information
• Browser type and version
• Usage data and analytics
• Cookies and similar technologies

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our service
• Process transactions and send related information
• Send you technical notices and support messages
• Respond to your comments and questions
• Send marketing communications (with your consent)
• Analyse usage patterns to improve our service
• Detect and prevent fraud or abuse

4. Legal Basis for Processing

Under UK GDPR, we process your data based on:

• Contract: Processing necessary to perform our contract with you
• Legitimate Interests: Processing necessary for our legitimate business interests
• Consent: Where you have given explicit consent
• Legal Obligation: Processing required to comply with law

5. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

• Service Providers: Third parties that help us operate our service (e.g., Stripe for payments, AWS for hosting)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger or acquisition

6. Data Security

We implement appropriate technical and organisational measures to protect your data:

• 256-bit SSL encryption for all data transmission
• Encrypted storage for sensitive data
• Regular security audits and testing
• Access controls and authentication
• Data stored on UK/EU-based servers

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. We retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymise your data within 30 days, unless we are legally required to retain it.

8. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Request a copy of your data in a portable format
• Restriction: Request limitation of processing
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at privacy@businessdashboard.com

9. Cookies

We use cookies and similar technologies to improve your experience. You can control cookies through your browser settings. Essential cookies are required for the service to function.

10. International Transfers

Your data is primarily stored and processed in the United Kingdom. Where we transfer data outside the UK, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

11. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Material changes will be communicated via email.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been breached.