Privacy Notice

Zainab Irshad Akhtar, trading as The Growing Ledger, is the data controller for the personal data described here. That means we decide why and how your data is used, and we are responsible for looking after it. Contact us at hello@growingledger.com.

• Account details — your name (if given) and email address, plus authentication credentials. Used to create and secure your account and to send service emails such as confirmation and password resets. Legal basis: performance of our contract with you.
• Your ledger entries — the text, dates and categories you record. Used only to store and show your ledger back to you. Legal basis: performance of our contract with you.
• Subscription status — your plan, status and renewal dates, and the identifiers our payment provider gives us. Used to unlock Pro features and support you with billing questions. Legal basis: performance of our contract, and legal obligation for tax records.
• Newsletter email address — if you sign up for the letter. Used only to send it. Legal basis: your consent, which you can withdraw at any time.
• Usage and technical data — pages viewed, clicks on recommendation links, referring site, approximate device and browser information, and IP address as processed by our hosting. Used for security, fraud prevention, fixing faults and understanding which writing is useful. Legal basis: our legitimate interests in running and improving a secure service.
• Support messages — what you write to us, so we can reply. Legal basis: legitimate interests.

Card numbers never reach us. Payment details are collected and processed directly by Paddle.

• Hosting and database providers — who store the site and your account data on our behalf.
• Paddle — our Merchant of Record, for the sale of subscriptions, billing, subscription management, tax compliance and invoicing.
• Email delivery provider — to send account and newsletter emails.
• Professional advisers — accountants or legal advisers, where necessary.
• Authorities — where we are required to by law.

We do not sell your personal data, and we do not sell or publish your ledger entries.

Some of our providers process data outside the UK and EEA. Where that happens, transfers are protected by an adequacy decision or by Standard Contractual Clauses together with appropriate additional safeguards.

We keep your account and ledger data for as long as your account is open. If you close it, we delete or anonymise your data within 90 days, except records we must keep for legal or tax reasons (typically six years for transaction records). Newsletter addresses are removed as soon as you unsubscribe. Aggregated analytics that cannot identify you may be kept indefinitely.

Under UK GDPR you have the right to:

• access a copy of your personal data
• have inaccurate data corrected
• have your data erased
• restrict or object to how we process it
• receive your data in a portable format
• withdraw consent at any time, where we rely on consent

Email hello@growingledger.com and we will respond within one month. If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, encrypted storage, row-level access rules so one account cannot read another's entries, and access limited to those who need it.

We use strictly necessary cookies and browser storage to keep you signed in, remember your theme, and secure the checkout. We do not run advertising cookies. Clicks on recommendation links are counted in our own database without profiling you; the retailer you land on will apply its own cookies under its own policy. You can clear or block cookies in your browser, though signing in will stop working if you block the essential ones.

If we change this notice we will update the date above. See also our Terms & Conditions and Refund Policy.