Privacy Policy

1. Who we are

AuditLease is a UK-based lease accounting software service operated by Darren Foster. Our service helps businesses and accounting firms manage lease portfolios in compliance with IFRS 16 and FRS 102.

For data protection purposes, AuditLease is the data controller for personal data collected through this website and application. You can contact us at privacy@auditlease.co.uk.

2. What data we collect

We collect the following categories of personal data:

• Account data: your name, email address, and password (stored as a secure hash)
• Organisation data: your company name, company number, and accounting preferences
• Lease data: lease details, financial figures, and supporting documents you upload
• Usage data: log data, IP addresses, browser type, pages visited, and feature usage
• Payment data: billing contact details and subscription status (payment card details are handled by our payment processor and not stored by us)

3. How we use your data

We use your personal data to:

• Provide and maintain the AuditLease service
• Process your subscription and send billing communications
• Send product updates, security notices, and service announcements
• Investigate and resolve technical issues
• Comply with our legal obligations
• Improve the product based on aggregated, anonymised usage data

We do not sell your personal data. We do not use your data for advertising purposes.

4. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

• Contract: processing necessary to provide the service you have signed up for
• Legitimate interests: improving the product, preventing fraud, and maintaining security
• Legal obligation: where we are required to retain or disclose data by law
• Consent: for any optional marketing communications, which you may withdraw at any time

5. Data storage and security

All data is stored within the United Kingdom and European Economic Area. We use Microsoft Azure infrastructure hosted in UK South. Data is encrypted in transit using TLS and encrypted at rest.

We maintain access controls, audit logging, and regular security reviews. We do not transfer personal data outside the UK or EEA without appropriate safeguards.

6. Data retention

We retain your account data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required to retain it for legal or regulatory purposes.

Lease and financial data uploaded to AuditLease may be subject to statutory retention requirements. We recommend you export any required records before closing your account.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict certain processing
• Receive your data in a portable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@auditlease.co.uk. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Third-party processors

We use the following third-party service providers who process data on our behalf:

• Microsoft Azure: infrastructure, storage, and application hosting
• Stripe: payment processing (they do not receive your lease data)
• Application Insights: application monitoring and error logging

All processors are bound by data processing agreements and are required to meet UK GDPR standards.

9. Cookies

AuditLease uses essential cookies required for authentication and session management. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may prevent you from signing in to the application.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify registered users of material changes by email. The date at the top of this page shows when it was last updated.

11. Contact

For any questions about this policy or how we handle your data, contact us at privacy@auditlease.co.uk.