Your data, your rights.

At Setora, we believe your data belongs to you, not us. Here’s exactly how we handle it under UK GDPR.

As a UK-based service, we comply fully with UK GDPR. You and your customers have the following rights over your data.

  1. Access: Request a full copy of all data we hold.
  2. Rectification: Correct any inaccurate information.
  3. Erasure: Request deletion of all your data, the "right to be forgotten".
  4. Portability: Export your data in a standard format so you’re never locked in.
  5. Restriction: Ask us to limit how we process your data.
  6. Objection: Object to any processing you’re not comfortable with.

You can export your customer list as CSV, including contact details, marketing consent, booking totals and last booking date. Available reports can also be downloaded as CSV when you need them.

  • Active accounts: We keep your data for as long as your account is active.
  • Cancelled accounts: Your account enters a 60-day read-only data access period for export, then data is deleted from live systems within 30 days and from backups within a further 30 days, unless we’re legally required to retain certain records (e.g. financial records for HMRC).
  • Customer booking data: Managed by you. You can delete individual customer records at any time from your dashboard.
  • Laravel Cloud: Application backend. Data location: EU (London).
  • Vercel: Marketing site & booking platform hosting. Data location: EU/UK.
  • Stripe: Payment processing. Data location: EU/UK.
  • Clerk: Authentication. Data location: EU/UK.
  • Crisp IM S.A.S.: Live chat widget (marketing site). Data location: France/EU.
  • PostHog: Website & product analytics. Data location: EU (Frankfurt).

Data security

We protect your data with encryption in transit (TLS) and at rest, role-based access controls, and regular security reviews. We will never access your account data without your explicit permission.

Cookies and tracking

We use optional browser storage and cookies on the marketing website for PostHog analytics, first-touch attribution, live chat, Google Ads attribution and the Meta Pixel only with your explicit consent. You can decline these and the site works fully without them. PostHog session recording and person profiles are disabled on the marketing website. On booking pages, we do not use optional marketing cookies.

How to make a request

Email us at hello@setora.co.uk with your request. We’ll respond within 30 days, usually much sooner.

Contact and changes

Setora Technology Ltd, 61 Bridge Street, Kington, HR5 3DJ, United Kingdom. If we make significant changes to this policy, we’ll notify you by email at least 14 days in advance.