Privacy Notice

Much of the information entered into Lease Rater relates to businesses rather than individuals. However, some business information may still be personal data where it relates to a sole trader, partner, director, guarantor, named employee, identifiable user or identifiable client of an adviser or accounting firm.

We collect data:

• directly from you when you fill in forms, register, pay, generate reports or contact us;
• automatically when you use the Service;
• from your employer, organisation or another authorised account holder or adviser;
• from payment providers in connection with purchases; and
• from public or market-reference sources where relevant to operating the Service.

We use personal data for the following purposes and lawful bases.

Providing the Service

We use account, calculation and report data to create accounts, run calculations, generate outputs, store reports and provide requested downloads and support. The lawful basis is usually contract.

Payments and invoicing

We use transaction and billing data to process purchases, manage credits, keep financial records and handle payment queries. The lawful basis is contract and, where relevant, legal obligation.

Security and fraud prevention

We use technical, account and usage data to secure accounts, monitor abuse, investigate suspicious activity and maintain the integrity of the platform. The lawful basis is legitimate interests and, where relevant, legal obligation.

Service reliability and diagnostics

We use technical data, usage data and error logs to keep the Service working, diagnose failures and improve performance. The lawful basis is legitimate interests.

Support, complaints and dispute handling

We use contact, account and transaction data to respond to enquiries, investigate complaints and resolve disputes. The lawful basis is contract, legitimate interests and, where relevant, legal obligation.

Legal and regulatory compliance

We use personal data where needed to comply with tax, accounting, legal, regulatory, fraud-prevention or record-keeping obligations. The lawful basis is legal obligation and, where relevant, legitimate interests.

Optional analytics or non-essential technologies

If we enable non-essential analytics or similar technologies, we will rely on consent where required.

We do not currently describe a separate marketing programme in this repository. If marketing practices change, this Notice will be updated.

Our legitimate interests include operating and improving a secure B2B service, preventing misuse, supporting customers, maintaining records, defending legal claims and understanding service performance, while balancing those interests against individuals' rights and reasonable expectations.

Some information is required to create an account, take payment, generate a requested report or provide support. If you do not provide required information, we may be unable to provide the relevant part of the Service.

Some calculation fields are optional. If optional information is omitted, the scope, completeness or usefulness of the output may be reduced.

We may share personal data with:

• hosting and infrastructure providers used to operate the Service, including Render-hosted infrastructure where applicable;
• database, storage and backup providers used to store reports and account information;
• Stripe and other payment providers used to process purchases;
• professional advisers, insurers and auditors where reasonably required;
• regulators, law-enforcement bodies, courts and authorities where required or appropriate; and
• a prospective purchaser or successor to the business, with appropriate confidentiality and data-protection safeguards.

We do not sell personal data.

Some service providers may process personal data outside the UK. Where that happens, we aim to use lawful safeguards such as UK adequacy regulations, the International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or other recognised transfer mechanisms.

You can contact us at info@leaserater.co.uk if you would like more information about relevant safeguards.

Lease Rater acts as a controller for account management, billing, customer support, security, platform administration and our own legal and business compliance purposes.

The Service is designed to collect and process entity-level business and financial information and does not require, expect or request identifiable personal data about employees, directors, landlords or other third-party individuals. Since the Service is not designed to collect identifiable third-party personal data in ordinary use, Lease Rater does not expect to act as an Article 28 processor of such data in the ordinary operation of the Service. Users must not enter identifiable personal data about third-party individuals in any free-text field or elsewhere in the Service.

We keep personal data only for as long as reasonably necessary for the purposes described above. Our current retention approach is:

• active account data: while the account remains open and normally for up to 24 months after closure;
• paid reports and calculation records: while the account remains active and ordinarily for up to 7 years after generation so that customers can retain accounting and audit evidence;
• invoices, payments and financial records: ordinarily for at least 6 years plus the current accounting period where needed;
• support messages and complaint records: usually up to 24 months after the matter is closed, longer if needed for a dispute;
• security logs and abuse-monitoring records: usually up to 12 months, longer if needed for an investigation;
• backups: retained on a rolling basis and normally overwritten within a limited backup cycle; and
• suppression or unsubscribe records: if we introduce direct marketing in future, we may keep limited suppression data so that opt-out choices are respected.

We may keep data for longer where required by law, for legitimate dispute or fraud-prevention needs, or where the records form part of accounting or audit evidence that a customer has asked us to retain.

We use measures intended to protect personal data, including HTTPS or TLS in transit, secure password hashing, access controls, restricted administrative permissions, software updates, provider due diligence, logging and backup procedures.

No internet-based service can guarantee absolute security. If you believe your data or account has been compromised, contact info@leaserater.co.uk.

We maintain processes to assess suspected personal-data incidents and to notify affected individuals and regulators where the law requires us to do so.

Lease Rater uses essential cookies and similar technologies to keep users logged in, maintain session security and operate core site functions.

Non-essential analytics or similar technologies should not be enabled before valid consent where consent is required. See our Cookie Notice for more detail.

Depending on the circumstances, you may have the right to request access to personal data, rectification, erasure, restriction, objection, portability and withdrawal of consent where consent is the lawful basis.

These rights are not absolute and depend on the legal basis and circumstances of the processing. We may need to verify identity before responding.

You have the right to complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first, but you are not required to contact us before approaching the ICO.

Lease Rater does not carry out automated decision-making that produces legal or similarly significant effects on individuals.

The Service performs automated calculations to generate accounting-support outputs, but it does not make lending, employment, credit or legal decisions about individuals.

Lease Rater is a business-user service and is not intended for children.

We may update this Notice from time to time. Material changes will be reflected by a revised Last updated date and, where appropriate, additional notice on the website or through account communications.

Lease Rater is operated by Lease Rater Limited, a company registered in England and Wales (company number: [to be completed once incorporation is finalised]).

Email: info@leaserater.co.uk

Business correspondence address: [to be completed before deployment]