Privacy Policy

1. Who this applies to

This policy explains how LeftHandLabs Ltd, trading as QuoteLatch ("we", "us"), collects and uses personal data through the QuoteLatch website and application. It covers two groups of people: (a) business owners and team members who hold a QuoteLatch account, and (b) their clients, whose details a business enters into QuoteLatch to send quotes and invoices.

2. What we collect

• Account details: name, email address, password (stored hashed), and business details you provide (company name, address, VAT number).
• Client data you enter: your clients' names, email addresses, and postal addresses, and the quotes/invoices/payment records associated with them.
• Payment information: we do not store card details. Subscription payments and payments your clients make to you are both processed by Stripe - see Stripe's own privacy policy at stripe.com/privacy.
• Usage data: log data, IP addresses, and basic analytics needed to operate and secure the Service.

3. How we use it, and our lawful basis

We process account and client data to provide the Service (contract), to comply with legal obligations (e.g. tax records), and, in limited cases, for our legitimate interests (e.g. fraud prevention, keeping the Service secure). We do not sell personal data.

4. Who we share data with

We share data with the sub-processors needed to run QuoteLatch: Stripe (payments) and our email provider (Resend). We do not otherwise share personal data with third parties except where required by law.

5. International transfers

Data is processed and stored within the UK/EEA

6. How long we keep data

We retain your account details and QuoteLatch subscription billing records for 6 years after your account is closed to meet UK tax and accounting obligations. However, the client data you enter into the Service (your clients' names, addresses, and quote/invoice records) is held only for as long as your account is active. When you close your account, this client data is permanently deleted in accordance with our Data Processing Agreement, unless we are required by law to retain it.

7. Your rights

Under UK GDPR you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights regarding your QuoteLatch account, contact support@quotelatch.co.uk. Where we process data on your behalf (as a data processor), we will assist you in responding to requests from your own clients. If a client contacts us directly regarding their data, we will pass that request on to you, as you are the data controller.

8. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections and hashed passwords. No system is completely secure, and we cannot guarantee absolute security.

9. Cookies

QuoteLatch uses only the cookies necessary to keep you logged in and to protect the Service (e.g. session and CSRF-protection cookies).

10. Complaints

If you have concerns about how your data is handled, contact us first at support@quotelatch.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

11. Changes to this policy

We may update this policy from time to time. We will let you know of material changes before they take effect.