Privacy policy

Cytron Limited (company number 06655326), registered in England and Wales, is the data controller for account and marketing data and a data processor for accounting records you enter about your customers, suppliers and employees. AccuKash is a Cytron brand. Our registered office is 20–22 Wenlock Road, London, N1 7GU, England. Contact us at privacy@accukash.com.

Account data: name, email address, business details, and a hashed password. We never store passwords in a readable form.

Usage data: pages visited, features used, IP address, browser and device type — used to keep the service secure and to work out what to improve.

Billing data: handled by our payment processor. We store only the last four digits and card type.

Customer records: everything you enter about your business, held on your instruction.

Contract: to provide the service you have subscribed to.

Legitimate interests: to secure the platform, prevent fraud and abuse, detect automated submissions and improve the product.

Legal obligation: to keep financial records for the periods UK law requires.

Consent: for marketing email, which you can withdraw in one click.

We share data with service providers needed to run AccuKash, including hosting, payment, Open Banking, email delivery and, when enabled on contact forms, Cloudflare Turnstile for bot prevention. AccuKash does not currently submit VAT returns to HMRC.

When Turnstile is enabled, Cloudflare processes security signals such as IP address, TLS fingerprint, browser user-agent, sitekey and origin to detect bots. Cloudflare's Turnstile Privacy Addendum explains its processing, including its use of signals to improve bot detection.

We never sell personal data or share it with advertisers.

Cloudflare Turnstile Privacy Addendum

Core customer data is stored in the United Kingdom. Some service providers may process or access personal data outside the UK. Where a restricted transfer is needed, we rely on UK adequacy regulations or put an appropriate safeguard in place, such as the UK International Data Transfer Agreement or Addendum. Contact privacy@accukash.com for further information about relevant transfers and safeguards.

Account and accounting data: for the life of your subscription plus 90 days, unless a longer statutory retention period applies.

Support correspondence: 24 months. Security logs: 12 months.

You can request access, correction, deletion, restriction or portability of your personal data, and object to processing based on legitimate interests. Email privacy@accukash.com and we will respond within one month.

You can also complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.