Privacy Policy

AutoInvoicing  |  Last updated: May 2025

This Privacy Policy explains how Diskel Ltd collects, uses, and protects your personal data in connection with the AutoInvoicing website and product. We are committed to handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

AutoInvoicing is a product developed and operated by Diskel Ltd, a company registered in England and Wales.

Registered address: [DISKEL REGISTERED ADDRESS]
Company number: [COMPANY NUMBER]
Email: info@diskel.co.uk

Diskel Ltd is the data controller for personal data collected through the AutoInvoicing website and marketing activities. For data processed through the AutoInvoicing software on behalf of a customer organisation, Diskel Ltd acts as a data processor and the customer organisation is the data controller.

2. What Personal Data We Collect

We may collect the following categories of personal data:

Category Examples How collected
Contact information Name, job title, email address, phone number Enquiry forms, email correspondence
Company information Business name, industry, size Enquiry forms, sales conversations
Usage data Pages visited, time on site, referral source Automatically via cookies and analytics tools
Marketing preferences Email subscription status, communication preferences Sign-up forms, email marketing platform
Support data Support requests, error reports, correspondence Email, support channels

3. How We Use Your Personal Data

We use personal data for the following purposes:

  • Responding to enquiries and providing information about AutoInvoicing
  • Processing and managing customer accounts and licence agreements
  • Providing technical support and customer service
  • Sending marketing communications where you have consented or where we have a legitimate interest in doing so (B2B contacts)
  • Improving our website and understanding how visitors use it
  • Complying with our legal and regulatory obligations

4. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR:

  • Contract — to perform or prepare a contract with you or your organisation
  • Legitimate interests — for business development, improving our services, and B2B marketing, where these interests are not overridden by your rights
  • Consent — where you have provided explicit consent, such as subscribing to our email newsletter
  • Legal obligation — where we are required to process data to comply with a legal requirement

5. Marketing Communications

We may send marketing emails to business contacts where we have a legitimate interest in doing so, in accordance with the Privacy and Electronic Communications Regulations (PECR). You can opt out of marketing communications at any time by clicking the unsubscribe link in any email or by contacting us directly.

Where consent is required (for example, for personal email addresses), we will only send marketing communications where you have actively opted in.

6. Cookies and Analytics

Our website uses cookies and similar technologies to understand how visitors use the site and to improve your experience. We use Google Analytics to collect aggregated, anonymised usage data.

You can control cookie settings through our cookie consent tool or your browser settings. For more information about the cookies we use, please see our Cookie Policy [link if applicable].

7. Sharing Your Data

We do not sell your personal data. We may share data with trusted third parties in the following circumstances:

  • Service providers — such as email marketing platforms, CRM systems, and IT infrastructure providers, acting on our behalf under data processing agreements
  • Pegasus Software Ltd — where relevant to the delivery of support or licencing related to Opera 3 integration
  • Legal or regulatory authorities — where required to do so by law

Where data is transferred outside the UK, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

8. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. In general:

  • Customer and contract records are retained for 7 years following the end of the business relationship, in line with HMRC guidance
  • Marketing contact records are retained until you opt out or request deletion
  • Website analytics data is retained in accordance with our analytics platform settings (typically 26 months)
  • Support correspondence is retained for the duration of the support relationship and a reasonable period thereafter

9. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access

Request a copy of the personal data we hold about you.

Right to rectification

Ask us to correct inaccurate or incomplete data.

Right to erasure

Request that we delete your data in certain circumstances.

Right to restrict processing

Ask us to limit how we use your data in certain circumstances.

Right to data portability

Receive your data in a structured, commonly used format.

Right to object

Object to processing based on legitimate interests, including direct marketing.

Right to withdraw consent

Withdraw consent at any time where processing is based on consent.

Rights re automated decisions

Not to be subject to solely automated decisions with significant effects.

To exercise any of these rights, please contact us using the details below. We will respond within one calendar month.

10. Complaints

If you have concerns about how we handle your personal data, we encourage you to contact us in the first instance so we can try to resolve the matter. You also have the right to lodge a complaint with the UK's data protection authority:

Information Commissioner's Office (ICO)
ico.org.uk
Helpline: 0303 123 1113

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The date at the top of this page shows when the policy was last revised. We encourage you to review this page periodically.

Data protection enquiries

Diskel Ltd
[DISKEL REGISTERED ADDRESS]
info@diskel.co.uk