Privacy Policy

    Last updated: 18 March 2026

    AutoThink Group Ltd, trading as AutoSettle ("AutoSettle", "we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, web application, APIs, and related services (collectively, the "Service").

    By using the Service you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not use the Service.

    1. Data Controller

    The data controller responsible for your personal data is:
    AutoThink Group Ltd (trading as AutoSettle)
    Email: privacy@autosettle.co.uk

    2. Information We Collect

    2.1 Information You Provide

    • Account information: name, email address, company name, and password when you register.
    • Billing information: payment card details and billing address (processed securely by Stripe; we do not store full card numbers).
    • Business data: invoice data, debtor contact details, and related financial information you upload or sync via connected integrations.
    • Communications: messages and queries you send to us via email, live chat, or support channels.

    2.2 Information Collected Automatically

    • Usage data: pages visited, features used, timestamps, and session duration.
    • Device & browser data: IP address, browser type, operating system, and screen resolution.
    • Cookies & similar technologies: see our Cookie Policy for details.

    2.3 Information from Third Parties

    • Accounting integrations: when you connect Xero, QuickBooks, or other supported platforms, we retrieve invoice, contact, and organisation data on your behalf.
    • Payment processors: Stripe provides us with transaction confirmations and payout status.

    3. How We Use Your Information

    We use the information we collect to:

    • Provide, operate, and maintain the Service.
    • Process payments and manage subscriptions.
    • Send automated invoice-chasing communications on your behalf.
    • Generate analytics, AI-powered risk scores, and recovery insights.
    • Communicate with you about your account, updates, and support requests.
    • Improve and personalise the Service.
    • Comply with legal obligations and enforce our agreements.

    4. Legal Bases for Processing (UK GDPR)

    • Contract: processing necessary to perform our contract with you (e.g. providing the Service).
    • Legitimate interests: improving the Service, fraud prevention, and marketing (where it does not override your rights).
    • Consent: where you have given explicit consent (e.g. marketing emails). You may withdraw consent at any time.
    • Legal obligation: where processing is required by law.

    5. Data Sharing & Disclosure

    We do not sell your personal data. We may share information with:

    • Service providers: hosting (cloud infrastructure), payment processing (Stripe), email delivery, and analytics providers who process data on our behalf under appropriate agreements.
    • Connected platforms: Xero, QuickBooks, and other accounting integrations, only as authorised by you.
    • Legal & regulatory: when required by law, regulation, court order, or governmental request.
    • Business transfers: in connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

    6. International Data Transfers

    Your data may be processed in countries outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO), to protect your data.

    7. Data Retention

    We retain your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by law. When your account is closed, we will delete or anonymise your data within a reasonable period, unless retention is required for legal, accounting, or compliance purposes.

    8. Data Security

    We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

    9. Your Rights

    Under the UK GDPR, you have the right to:

    • Access the personal data we hold about you.
    • Rectify inaccurate or incomplete data.
    • Erase your data ("right to be forgotten") in certain circumstances.
    • Restrict processing of your data.
    • Data portability — receive your data in a structured, commonly used format.
    • Object to processing based on legitimate interests or direct marketing.
    • Withdraw consent at any time where processing is based on consent.

    To exercise any of these rights, please contact us at privacy@autosettle.co.uk.

    10. Cookies

    We use cookies and similar tracking technologies. For full details, please see our Cookie Policy.

    11. Children's Privacy

    The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

    12. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

    13. Complaints

    If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

    14. Contact

    If you have any questions about this Privacy Policy, please contact us at:
    AutoThink Group Ltd (trading as AutoSettle)
    Email: privacy@autosettle.co.uk
    Website: autosettle.co.uk

    Related pages