Who we are
LedgerDue provides deadline-management software for accountancy practices. For your account and billing information, LedgerDue is the data controller. For the client information you enter into the service, your practice is the controller and LedgerDue acts as your processor — see our Data Processing Addendum.
You can contact us about privacy at contact@ledgerdue.uk.
Information we collect
- Account data: your name, email address, optional recovery email, and authentication data.
- Client data you enter: the client records, obligations and deadline details you add to run your practice.
- Billing data: subscription status and payment records (card details are handled by Stripe, not us).
- Usage and device data: basic logs and analytics used to keep the service secure and working well.
- Cookies: see our Cookie Notice.
How we use your data
- To provide and operate the service, including generating and reminding you of deadlines.
- To process subscriptions and payments.
- To provide support and respond to your requests.
- To secure the service, prevent abuse and troubleshoot problems.
- To send service-related messages, and, only where permitted, occasional product updates.
Legal bases
We rely on: performance of our contract with you; our legitimate interests in running and improving a secure service; your consent where required (for example certain communications); and compliance with legal obligations.
Sharing and sub-processors
We do not sell your data. We share it only with trusted providers who help us run the service, under appropriate contracts:
- Vercel — application hosting.
- Supabase — database and authentication hosting.
- Resend — sending transactional and reminder emails.
- Stripe — payment processing.
We may also disclose data where required by law.
International transfers
Where data is processed outside the UK, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.
Retention
We keep personal data for as long as your account is active and as needed to provide the service. If your subscription lapses, we apply the following retention schedule so you have ample opportunity to return before anything is removed:
- For 7 days after access lapses your account becomes view-only — you can still sign in to view and export your data, but not edit it.
- After that, the account is suspended and locked, but your data is kept dormant and can be fully restored if you resubscribe.
- If the account remains inactive and unpaid for 6 months, it is scheduled for deletion and we email you a final reminder with a link to resubscribe and keep your data.
- 30 days after that notice, your account data and personal details are permanently deleted or anonymised.
After deletion we retain only the minimal billing and transaction records we are legally required to keep for accounting and tax purposes. You can ask us to delete your data sooner at any time.
Your rights
Subject to conditions, you have the right to access, correct, delete, restrict or object to processing of your personal data, and to data portability. You can exercise these rights by contacting us.
If you have a concern you can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Security
We protect data with encryption in transit and at rest, modern authentication, and access controls. See our Security page for more.
Children
LedgerDue is a business tool intended for professionals and is not directed at anyone under 18.
Changes to this notice
We may update this notice from time to time. Material changes will be notified through the service or by email.