Effective Date:
01/06/2025
EverTray (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy outlines how we collect, use, and protect your personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
EverTray is a trading name of [Insert Registered Company Name], a company registered in [Insert Jurisdiction] with company number [Insert Company Number]. Our registered address is [Insert Address].
We provide SaaS solutions to small business owners, including invoicing, payment tools, AI messaging, CRM systems, and other productivity features.
If you have any questions about this Privacy Policy or your personal data, you can contact us at:
Email:
Postal Address:
[Insert Address]
Data Protection Officer (if applicable):
N/A
We collect and process the following types of personal data:
Name, email address, and contact detailsBusiness name and addressPayment and billing informationLogin credentialsCustomer communications
IP address and browser typeUsage data and preferences within our platformCookies and similar technologies (see Cookie Policy)
As part of our CRM, messaging, and invoicing tools, you may upload or input personal data relating to third parties (e.g. your own clients). In such cases, you act as the Data Controller and we act as your Data Processor.
We rely on the following legal bases for processing your data:
Contractual necessity: To provide you with our services.Legitimate interests: For analytics, service improvement, and fraud prevention.Consent: For certain marketing communications (opt-in only).Legal obligation: To comply with applicable laws.
We use your personal data to:
Provide and manage your account and access to our platformProcess payments and issue invoicesCommunicate with you about your account and updatesProvide customer supportImprove our services and develop new featuresEnsure compliance with legal obligations
We do not sell your personal data. We may share it with:
Service providers and third-party processors (e.g. payment processors, hosting services)Legal and regulatory authorities if required by lawIn the event of a business sale or restructure, with potential buyers or successors
All third-party service providers are required to take appropriate security measures and only process your data for specified purposes.
Some of our service providers may process your data outside the UK. Where this occurs, we ensure that appropriate safeguards are in place (e.g. UK-approved Standard Contractual Clauses or adequacy decisions).
We retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for legal, accounting, or reporting requirements. Specific retention periods are:
Account information: for as long as your account is active + 6 yearsMarketing data: until you opt outCommunications data: 2 years from last interaction
You have the following rights under UK data protection law:
Access: Request a copy of your personal dataRectification: Correct inaccurate or incomplete dataErasure: Request deletion of your data (“right to be forgotten”)Restriction: Request we limit our processingData portability: Request transfer of your data to another providerObjection: Object to processing for direct marketingWithdraw consent: At any time, where processing is based on consent
To exercise any of these rights, contact us at [email protected].
We use cookies and similar technologies for analytics, performance monitoring, and user experience improvements. For full details, see our [Cookie Policy].
We implement appropriate technical and organisational measures to secure your data, including:
Encrypted storage and transmissionAccess controls and authenticationRegular security assessments and backups
If you are unhappy with how we’ve handled your data, you can complain to the
Information Commissioner’s Office (ICO):
Website:
Helpline:
0303 123 1113
We may update this Privacy Policy from time to time. The updated version will be posted on our website with the revised effective date.
This Privacy Policy was last updated on 1/06/2025.