Privacy policy
Last updated 26 October 2026
This policy explains what personal information Wright & Ledger holds, why, who it’s shared with, and your rights. It applies to tradespeople who use the app and to their customers who receive invoices through it.
Who we are
Wright & Ledger is run by the sole trader who runs Wright & Ledger. For anything about your data, email ajpiper10@gmail.com.
- If you use the app (a trader), we’re the controller of your account information.
- If you received an invoice, the tradesperson who sent it is the controller of your details. We process them on their behalf so they can bill you and chase payment. You can contact them or us, and we’ll help.
What we hold about traders
- Account details: your name, business name, email, mobile, address, trade, and company number if you have one. Your password is stored scrambled (hashed), so no one can read it.
- Tax and payment details for your invoices: UTR, CIS status, VAT number, and the bank details you want customers to pay into. If you connect Stripe for card payments, your Stripe key is stored encrypted.
- Your work records: customers, jobs, invoices, payments, expenses and any receipt photos you add.
- Your subscription: your plan status and the reference numbers Stripe gives us. Stripe holds your card details. We never see or store them.
- How you found us: who invited you, if anyone, and what you told us when you signed up.
- Notifications: if you turn on phone notifications, your phone’s notification address.
- Technical information: our hosting keeps short-term server logs, which include IP addresses, to keep the service running and secure.
What we hold about traders’ customers
This is what the tradesperson enters: your name, email, mobile and address, whether you’re a homeowner or a business, the invoices sent to you, payments, the reminders sent, and when you opened an invoice.
Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Run your account, create and send invoices, send payment reminders, calculate CIS and VAT, keep your books | Contract: we need it to provide the app |
| Take subscription payments and apply referral credits | Contract |
| Keep billing records | Legal obligation: tax law |
| Keep the service secure, prevent fraud and misuse of the referral scheme, fix problems | Legitimate interests |
| Tell you about tax and VAT changes that affect your trade, and about important changes to the app | Legitimate interests, and contract |
| Understand how people find us, so we can grow | Legitimate interests |
We don’t sell personal information, and we don’t use it for advertising. If we ever send marketing emails, you can unsubscribe with one click.
Who we share it with
We use these suppliers to run the app. Each only gets what it needs for its job:
| Supplier | What for | Where |
|---|---|---|
| Render | Hosting the app and database | EU (Frankfurt) |
| Resend | Sending invoice and reminder emails | USA |
| Twilio | Sending text messages | USA |
| Stripe | Subscription payments, and card payments to traders who connect Stripe | UK, EU and USA |
| Apple, Google or Mozilla | Delivering phone notifications, if you turn them on | Depends on your phone or browser |
If you enter a company number, we look it up on Companies House, which is a public register. We may also share information if the law requires it (for example, with HMRC), or with professional advisers such as our accountant or lawyer.
When data goes to the USA, it’s protected by the UK–US Data Bridge or by the UK’s approved contract terms for international transfers.
How long we keep it
- While your account is open, we keep your records so you can use them.
- If you close your account, we delete your data, and your customers’ data, within 90 days. Before closing, download anything you need: HMRC expects you to keep business records for at least 5 years after the 31 January deadline for that tax year.
- We keep records of subscription payments for 6 years, because tax law requires it.
- Server logs are kept for a short period, then deleted automatically.
Cookies
We use one cookie, which keeps you signed in. It’s essential for the app to work. We don’t use advertising or tracking cookies, so there’s no cookie banner.
Keeping it safe
The app uses encrypted (HTTPS) connections. Passwords are hashed, Stripe keys are encrypted, and access to the database is restricted. Only the person who runs Wright & Ledger can see account data, and only to support you or keep the service running.
Your rights
You have the right to:
- get a copy of your data;
- have wrong data corrected;
- have your data deleted;
- restrict how it’s used, or object to it being used;
- have it given to you in a format you can move elsewhere.
Email ajpiper10@gmail.com to use any of these. We’ll reply within one month. If you received an invoice and want your details changed or removed, we may need to involve the tradesperson who sent it, because they may have to keep invoice records by law.
If you’re unhappy with how we’ve handled your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes
If we make important changes to this policy, we’ll tell traders by email or in the app before they take effect.