Privacy

Who we are

Stewardry is a product of Budd and Todd Ltd, a company registered in England and Wales (number 13766118). Budd and Todd Ltd is the data controller for the purposes of this notice, and our registered office and contact details are on the about page. For anything here, including any request about your own data, use the contact form and say it concerns privacy. It reaches us directly.

This website

This site sets no cookies and runs no analytics or advertising scripts. We do not know who you are or that you visited. Fonts are served by Google Fonts, which means your browser requests them from Google and Google therefore sees your IP address; we are working to self-host them and remove that.

If you contact us

The contact form sends what you write to us by email, along with your IP address so that we can deal with abuse of the form. We keep your message and our replies so we can carry on the conversation. We do not add you to a mailing list, and we do not pass your details to anyone else. The form is handled on our own server; nothing is sent to a third-party form service.

The Stewardry application

Everything below concerns the application at app.stewardry.co.uk, which you reach by signing in. It is a different situation from the website, because there we do not know who you are and here you have told us.

Two roles, and the difference matters

For your own account — your name, your email address, and the record of you signing in — Budd and Todd Ltd decides what is collected and why, so we are the controller.

For what you put into the ledger — your customers, your suppliers, their addresses, what they owe you — you decide what to record and why, and we hold it on your behalf. There we are the processor and you are the controller. We do not look through it, mine it, train anything on it, or use it for any purpose of our own. The practical consequence is that if one of your customers asks you what you hold about them, that is your question to answer, and we will help you answer it.

What the application stores

Your account details and the accounting records you enter, in a database of your organisation's own. Each organisation gets a separate database rather than a shared one with a column to tell customers apart.

Cookies

The application sets cookies that keep you signed in and remember which organisation you are working in. They are necessary for it to function at all — without them every page would ask you to sign in again — so they do not require consent, and there is no banner because there is nothing to consent to. We set no analytics or advertising cookies in the application, and no third party sets any cookie through it.

Scripts the application loads

Two files come from somewhere other than us on every page: a stylesheet from cdnjs.cloudflare.com and a script from Lemon Squeezy, our payment provider. Your browser fetches them directly, which means those two companies see your IP address, the same way Google sees it when this website loads its fonts. Neither sets a cookie — we have checked — and neither is analytics. The Lemon Squeezy script is loaded on every page although only billing uses it; that is a defect we intend to fix rather than a decision.

Who else sees anything

Two services. When you ask the application to confirm your company details, it sends your company number to Companies House and stores what the public register returns. That is a lookup of public information, and it happens only when you press the button.

The second is Sentry, which tells us when the application has broken. If it fails while you are using it, the error and its stack trace are sent to Sentry, along with the address of the page you were on and which browser you use. We have deliberately stripped out what would otherwise travel with it: what you submitted, your cookies, anything in the query string, and every request header but a short permitted list. It carries no accounting figures, no tax data and no customer records. When nothing goes wrong it sends nothing at all, and it runs on our server rather than in your browser, so it sets no cookie and cannot watch what you do. Sentry is operated by Functional Software, Inc., a company in the United States; our account is in its European region and the reports are held in Germany.

The software can also connect to services for email, file storage, payments and bank feeds. None of them is configured or in use. If that changes, this notice changes with it, in the same commit, and we will tell you before it takes effect rather than after.

Where it is held

The application and its databases run on our own hardware in the United Kingdom, and Companies House is a UK public body. Your accounting records never leave the United Kingdom. The single exception is the crash reports described above, which go to Sentry's European region in Germany — a country the UK government has found to offer adequate protection, so no further safeguard is required for the transfer.

How long we keep it

Your records for as long as you hold an account, and then for as long as you ask us to. Accounting records have their own statutory retention periods — a UK company must keep them for six years — and deleting your account is not a reason for us to make that impossible, so we will agree a point with you rather than delete on a timer. Ask us to delete and we will, and we will tell you plainly what that removes.

Your rights

Under UK GDPR you may ask what we hold about you, ask us to correct or delete it, object to processing, and receive your data in a portable form. Use the contact form and we will respond within one month.

If we get it wrong, you may complain to the Information Commissioner's Office at ico.org.uk.