Spreadsight

Privacy policy

Last updated: 31 October 2026

Draft: fill in the parts in [square brackets] and have it checked before you launch.

Who we are

Spreadsight is run by [your business name], [address]. We are the data controller for the personal data described here. Contact us at hello@spreadsight.co.uk. ICO registration number: [number].

The files you analyse stay on your device

When you open a file in Spreadsight, it is read and processed inside your own web browser. Your file and its contents (sales, customers, staff, vehicle registrations or anything else) are not uploaded to us and we cannot see them. When you close the page, the data is gone, unless you save a report or cleaned file to your own device.

Because of this, you remain responsible for the personal data in your own files, and for handling it under your own data protection obligations.

What we do collect

Why we use it

To provide the service and manage your subscription (contract), to keep the service secure and improve it (legitimate interests), and to meet legal and tax requirements (legal obligation). We will only send marketing emails if you agree, and you can unsubscribe at any time.

Who we share it with

Only service providers who help us run Spreadsight: [hosting provider], Stripe (payments) and [login provider, e.g. Supabase]. Where they are outside the UK, appropriate safeguards are in place. We never sell your data.

How long we keep it

Account data for as long as you have an account, then up to 6 years for tax and accounting records, as UK law requires.

Your rights

You can ask to see, correct, delete or move your data, or object to how we use it. Email us and we'll reply within one month. If you're unhappy, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We only use cookies and storage that are needed for the service to work, such as keeping you signed in. [Update if you add analytics or advertising cookies.]