Privacy Policy

Last updated: 2026

1. Who we are

SubReady is a record-keeping platform operated by Aigenticura Ltd ("SubReady", "we", "us"), registered in England & Wales. We hold UK ICO registration ZC180096 and own the registered UK trade mark SUBREADY (UK00004398313).

2. What data we collect

• Enquiry & signup details — your name, email, role and any message you send through our forms.
• Marketing preferences — whether you have opted in to receive updates.
• Product data — records you create, such as receipts, invoices, income, expenses, deductions and job records, and the transactions contained in any bank statement (PDF) you choose to upload.
• Technical data — limited information needed to operate and secure the site, such as your cookie-consent choice.

We do not set analytics or marketing cookies unless you opt in.

3. Why we use it & our legal bases

We use data to respond to enquiries, operate our programmes, provide the service, improve our products, maintain security, and send marketing updates when you have opted in. Depending on the activity, our legal basis is typically your consent, the performance of a contract, or our legitimate interests in running and improving SubReady.

4. Bank statements & accountant access

You stay in control of which bank statements you upload and who can access your records at all times. SubReady reads the bank statements (PDF) you choose to upload. It never connects to your bank, and does not move money, initiate payments or provide payment services. Sharing records with an accountant only happens with your permission.

5. Sharing your data

We do not sell your personal data. Data may be shared with service providers, accountants or partners (with your permission), and where required by law. Service providers act under appropriate agreements and only process data on our instructions.

6. How long we keep data

While your subscription is active we keep your records for as long as you keep the account. After that our retention periods are fixed and published:

• Cancelled paid account — records kept for 12 months from the end of your paid period, during which you can sign back in to view and export them, then deleted permanently.
• Trial or practice pilot that never converted — records kept for 90 days, then deleted permanently.
• Our own billing and tax records — kept for 6 years, because UK tax and company law requires it.
• Encrypted backups — roll off within 35 days of deletion.

You can ask us to delete your data sooner and we will, subject to anything we must keep by law. Deletion is permanent, so export first. These periods are also set out in the Terms of Service.

7. Your rights

Under UK data protection law you have rights to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. Where we rely on consent, you can withdraw it anytime.

8. Security

We use secure, modern cloud infrastructure and take a data-minimisation approach — aiming to collect only what we need. While no system can be guaranteed to be perfectly secure, we design with privacy and data protection in mind and keep our practices under review.

9. Contact & complaints

Privacy contact: privacy@subready.co.uk. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.