Privacy Notice

Ledgerline is operated by Cliford Surprisse, who is the data controller for the personal data described in this notice. That means Cliford Surprisse decides how and why your personal data is processed when you use Ledgerline.

• Account data — your name, email address, and login credentials, used to create and secure your account (legal basis: performance of our contract with you).
• Financial data you enter — journal entries, bank transactions, payroll and tax figures, used to provide the bookkeeping service (legal basis: performance of our contract).
• Support messages — anything you send us through the contact form, used to answer your questions (legal basis: legitimate interests).
• Usage and device data — how you use the app, device identifiers, and IP address, used for security, fraud prevention, and product improvement (legal basis: legitimate interests).

Payment-related data (card details, billing address, tax information) is collected and processed directly by Paddle, our Merchant of Record, and is not covered by this notice.

• Service providers — hosting, analytics, and support tooling that process data on our behalf under contract.
• Paddle — our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance, and invoicing.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where we are required to by law.

We do not sell your personal data.

We keep your personal data for as long as your account is active and as long afterwards as we need to meet legal, accounting, or reporting obligations. When data is no longer needed, it is deleted or anonymised.

Depending on where you live, you may have the right to access, correct, or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us through the contact page. If you are in the UK or EEA, you also have the right to complain to your supervisory authority, and we will respond to requests within one month. Where data is transferred outside the UK/EEA, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We use appropriate technical and organisational measures to protect your data, including encryption in transit and access controls that limit who can see it.

Ledgerline uses essential cookies only — the ones needed to keep you signed in and keep the service secure. We do not use analytics or marketing cookies. You can clear cookies at any time in your browser settings, though signing in will no longer work without the essential ones.

Questions about this notice or your data? Reach us through the contact page.