← Back to app

Legal & Privacy

We keep things simple and transparent. Here's exactly how we handle your data and what you agree to when using SoloTrader.

Effective date: 26 August 2026  ·  v1.0  ·  Applies to solotrader.app

🏢 1. Who We Are

SoloTrader ("we", "us", "our") is operated by Oliver Simpson, trading as SoloTrader (sole trader, England and Wales).

  • Trading address: 9 Cliff Road, SS9 1HJ, England
  • Contact email: [email protected]
  • Website: solotrader.app

For the purposes of UK GDPR and the Data Protection Act 2018, we are the data controller of personal data relating to your account and subscription. Where you use SoloTrader to store data about your own customers, we act as your data processor — you remain the controller of that data (see Section 3).

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk at any time.

📄 2. What This Policy Covers

This policy explains what personal data we collect when you use SoloTrader, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have over it.

This policy applies to the SoloTrader web application at solotrader.app and any future products we offer under the SoloTrader name.

It does not apply to third-party services you connect to SoloTrader (such as Stripe). Those services have their own privacy policies.

⚖️ 3. The Two Roles We Play

Where we are the controller: We control personal data relating to your account — your name, email address, subscription status, and billing information. We determine the purpose and means of processing this data and are fully responsible for it under UK GDPR.

Where we are your processor: When you use SoloTrader to store information about your own customers — their names, phone numbers, addresses, and financial records — you are the controller of that data, and we process it solely on your behalf. You are responsible for ensuring you have a lawful basis to store your customers' data in SoloTrader.

As your processor, we will:

  • Process your customers' data only as necessary to provide the SoloTrader service to you
  • Not share your customers' data with any third party except as set out in Section 9
  • Delete your customers' data when you delete your account (within 30 days)
  • Assist you in responding to data subject rights requests from your customers where technically possible

🔞 4. Who Can Use SoloTrader

SoloTrader is intended for use by adults aged 18 or over operating businesses in the United Kingdom. By creating an account, you confirm that you are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If we discover that we hold data from someone under 18, we will delete it promptly.

📋 5. The Data We Collect

5.1 Account Information

When you create an account via Microsoft, we receive your email address and display name from Microsoft. We do not collect or store your Microsoft password — authentication is handled entirely by Microsoft Entra ID.

5.2 Business Profile

  • Business name and address
  • Business logo (uploaded as an image file)
  • Preferred display currency and settings

5.3 Customer Data

When you add customers, you store data about them including full name, phone number, email address, address and postcode, notes, and booking preferences. You are the controller of this data.

5.4 Financial Records

  • Quote and invoice numbers, dates, due dates, and statuses
  • Line items, quantities, unit prices, and totals
  • Transaction descriptions, amounts, categories, and types
  • Mileage log entries (origin, destination, distance, calculated cost)
  • Generated PDF documents for quotes and invoices

5.5 Bookings & Scheduling

  • Customer name, date, time, duration, job type, price, and status

5.6 Reminders & To-Dos

  • Title, notes, due date and time, priority, and status

5.7 Subscription & Billing

  • Subscription status (Trial, Active, Cancelled, PastDue)
  • Stripe customer ID and subscription ID (reference numbers only)
  • Trial start and end dates
We never store your card details. Payment card information is collected and processed exclusively by Stripe.

5.8 Preferences

  • Dark mode preference and document template customisation

5.9 Security & Access Logs

Our hosting infrastructure (Cloudflare) automatically logs standard request data including IP addresses, request paths, and timestamps for the purpose of operating and securing the service. This data is not linked to your account records and is retained for up to 90 days by Cloudflare.

🔒 6. How We Use Your Data

  • To provide and operate the SoloTrader platform
  • To authenticate you and maintain your session
  • To generate quotes, invoices, and PDF documents
  • To calculate tax estimates based on your transaction data
  • To process subscription payments via Stripe
  • To send transactional communications (billing notifications, trial expiry reminders)
  • To maintain and improve the security and performance of the platform
We do not sell your data. We do not use your data or your customers' data for advertising, and we do not share it with any third party for marketing purposes.

🤖 7. No Automated Decision-Making or AI Processing

SoloTrader does not use artificial intelligence or machine learning to process your data. The tax calculator and other calculations are rule-based (applying HMRC's published rates and standard calculations) and do not involve profiling or automated decision-making with significant effects on you.

The tax calculator and mileage figures are estimates only and do not constitute professional financial, tax, or accounting advice. Consult a qualified accountant before relying on these figures for tax purposes.

📜 8. Legal Bases for Processing

Under UK GDPR Article 6, we rely on the following legal bases:

Processing activityLegal basis
Providing the SoloTrader platformContract — Article 6(1)(b)
Authenticating you via MicrosoftContract — Article 6(1)(b)
Storing your business profile, customers, and financial recordsContract — Article 6(1)(b)
Processing subscription payments via StripeContract — Article 6(1)(b)
Sending transactional account emailsContract — Article 6(1)(b)
Security and infrastructure loggingLegitimate interests — Article 6(1)(f)
Retaining billing recordsLegal obligation — Article 6(1)(c) (HMRC — 7 years)
Improving the platformLegitimate interests — Article 6(1)(f)

We do not process special category data (Article 9 UK GDPR) and we do not send marketing emails.

🤝 9. Third-Party Processors

We work with the following third-party processors. Each processes your data only on our instructions and for the purposes set out below.

ProcessorPurposeLocation
Microsoft
(SharePoint, Entra ID, Power Automate)
Database, file storage, authentication, backend automation EU / UK (Microsoft EU Data Boundary)
Cloudflare Web hosting, edge network, security EU edge / US headquarters
Stripe Payment processing and subscription management UK / EU / US

We do not use any analytics platform (no Google Analytics, no PostHog). We do not use any third-party marketing email service.

Microsoft is our primary data sub-processor. Your business data, customer data, and financial records are stored in Microsoft SharePoint, within the Microsoft EU Data Boundary — meaning your data is stored and processed within the EU and UK.

🌍 10. International Data Transfers

Microsoft: Data is stored and processed within the EU and UK under Microsoft's EU Data Boundary programme. No transfer mechanism is required for UK-to-EU transfers under the UK's adequacy decisions.

Cloudflare: Cloudflare's Data Processing Addendum provides appropriate safeguards via Standard Contractual Clauses for any transfers outside the UK/EEA.

Stripe: Stripe's Data Processing Agreement includes Standard Contractual Clauses and the UK IDTA for transfers from the UK.

You can request details of any transfer agreements at [email protected].

📧 11. Communications We Send You

We send the following transactional communications as part of providing the service:

  • Trial expiry reminders
  • Subscription billing notifications
  • Account security notifications (via Microsoft)

We do not send marketing or promotional emails. We do not use your email address for any purpose other than operating your account.

🗓️ 12. How Long We Keep Data

Data typeWhile account activeAfter account deletion
Account information (name, email)Life of accountDeleted within 30 days
Business profileLife of accountDeleted within 30 days
Customer recordsLife of accountDeleted within 30 days
Quotes, invoices, financial recordsLife of accountDeleted within 30 days
Bookings, reminders, to-dosLife of accountDeleted within 30 days
PDF documentsLife of accountDeleted within 30 days
Subscription billing records (Stripe)Life of accountRetained 7 years — HMRC obligation
Cloudflare infrastructure logsUp to 90 daysAutomatically expired by Cloudflare

✅ 13. Your Rights Under UK GDPR

To exercise any right, contact us at [email protected]. We will respond within one month.

Right of Access Request a copy of all personal data we hold about you
Right to Rectification Ask us to correct inaccurate or incomplete data
Right to Erasure Request deletion of your data ("right to be forgotten")
Right to Restriction Ask us to limit how we process your data
Right to Portability Receive your data in a structured, machine-readable format
Right to Object Object to processing based on legitimate interests
No Automated Decisions SoloTrader does not make automated decisions with significant effects on you
Right to Complain Lodge a complaint with the ICO at ico.org.uk
You can delete your account directly from the Settings panel within SoloTrader, which will trigger deletion of your data within 30 days. You have the right to complain to the ICO at ico.org.uk or call 0303 123 1113 at any time.

Your customers' rights: If one of your customers contacts you to exercise their data subject rights, you are responsible as controller for responding. You can export or delete a customer's record from within SoloTrader. For technical assistance, contact [email protected].

🛡️ 14. Security

We take reasonable technical and organisational measures to protect your data, including:

  • TLS/HTTPS encryption for all data in transit
  • Encryption at rest for data stored in Microsoft SharePoint (Microsoft-managed encryption)
  • Authentication via Microsoft Entra ID — no passwords stored by SoloTrader
  • Server-side verification of all requests — your identity is resolved from your authenticated token, preventing one user from accessing another's data
  • Access controls limiting who can access production systems and data

If we become aware of a personal data breach that poses a risk to your rights, we will notify you and the ICO within 72 hours as required by UK GDPR Article 33.

🍪 15. Cookies & Local Storage

SoloTrader uses only technically necessary browser storage (localStorage and sessionStorage) to maintain your session state and application preferences locally on your device. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

Cloudflare may set cookies as part of its DDoS protection and bot management systems. These are technically necessary for the secure operation of the service.

👶 16. Children

SoloTrader is not directed at anyone under 18. If you believe a person under 18 has provided personal data through SoloTrader, contact us at [email protected] and we will delete the data promptly.

🔄 17. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at least 14 days before the change takes effect and update the effective date at the top of this page. For minor changes (clarifications, corrections), we will update the effective date without separate notification. Continued use of the service after the effective date constitutes acceptance of the updated policy.

📬 18. Contact Us

For any privacy-related queries, requests to exercise your rights, or complaints, please contact:

  • Email: [email protected]
  • Post: Oliver Simpson (trading as SoloTrader), 9 Cliff Road, SS9 1HJ, England

We aim to respond to all requests within 30 days. If your request is complex, we may extend this by up to two further months and will inform you accordingly.

UK Data Regulator: Information Commissioner's Office — you have the right to complain to the ICO at any time without contacting us first.

Last updated: 18 August 2026  ·  Applies to solotrader.app

📄 Agreement to Terms

These Terms of Service ("Terms") govern your access to and use of SoloTrader, operated by Oliver Simpson, trading as SoloTrader (sole trader, England and Wales) ("we", "us", "our").

By creating an account or using SoloTrader, you confirm that you are at least 18 years old, have authority to enter into this agreement (including on behalf of any business), and agree to these Terms in full.

If you do not agree, you must not use SoloTrader.

🛠️ The Service

SoloTrader is a business management platform designed for sole traders and small businesses. It provides tools including:

  • Quote and invoice creation and management
  • Booking and job scheduling
  • Customer relationship management
  • Transaction and income tracking
  • PDF document generation
  • Subscription management via Stripe

We reserve the right to add, modify, or remove features at any time. We will endeavour to give reasonable notice of significant changes.

🔐 Your Account

You access SoloTrader using your Microsoft account via Microsoft Entra authentication. You are responsible for:

  • Maintaining the security of your Microsoft account credentials
  • All activity that occurs under your account
  • Notifying us immediately if you suspect unauthorised access at [email protected]

You must provide accurate and complete information when registering and keep it up to date. We may suspend or terminate accounts where we believe information is false or misleading.

💳 Subscription & Payment

Free Trial

New accounts receive a free trial period (as shown during sign-up). No payment details are required during the trial. At the end of the trial, you must subscribe to continue using the service. If you do not subscribe, your access will be suspended.

Paid Subscription

Subscriptions are billed on a recurring basis (monthly or annually as selected) via Stripe. By subscribing, you authorise us to charge your payment method on each renewal date until you cancel.

Price Changes

We may change subscription prices. We will give you at least 30 days' written notice of any price increase. Your continued use after that date constitutes acceptance of the new price.

Cancellation

You may cancel your subscription at any time via the "Manage Subscription" option in the app. Cancellation takes effect at the end of your current billing period. You will retain access until that date. We do not offer refunds for partial billing periods except where required by law.

Failed Payments

If a payment fails, we will notify you and attempt to retry. If payment remains outstanding, your access may be suspended until the outstanding amount is settled.

All payments are processed by Stripe. We do not store your card details. For payment disputes, contact us at [email protected].

✅ Acceptable Use

You agree to use SoloTrader only for lawful purposes and in accordance with these Terms. You must not:

  • Use the service for any unlawful, fraudulent, or deceptive purpose
  • Input false, misleading, or fraudulent business data or customer information
  • Attempt to gain unauthorised access to any part of the platform or another user's data
  • Use the service to harass, harm, or defraud third parties
  • Reverse engineer, decompile, or attempt to extract the source code of the platform
  • Resell or sublicense access to the service without our written consent
  • Use the service in any way that could damage, disable, or impair it
  • Upload malicious code, viruses, or harmful content

Breach of these provisions may result in immediate termination of your account without refund.

📁 Your Data & Content

You retain full ownership of all data and content you input into SoloTrader (your customers, quotes, invoices, bookings, and business information).

By using SoloTrader, you grant us a limited licence to process and store your data solely for the purpose of providing the service to you. We do not claim ownership of your data, and we do not use it for any purpose beyond operating the platform.

You are responsible for ensuring that any personal data you input about third parties (e.g. your customers) complies with applicable data protection law, including UK GDPR.

💡 Intellectual Property

The SoloTrader platform, including its design, code, branding, and content, is owned by Oliver Simpson (trading as SoloTrader) and is protected by copyright and other intellectual property laws.

We grant you a non-exclusive, non-transferable, revocable licence to access and use SoloTrader for your own business purposes during your subscription. This licence does not include the right to copy, modify, distribute, or create derivative works from the platform.

⚠️ Disclaimers

SoloTrader is provided on an "as is" and "as available" basis. To the fullest extent permitted by law, we disclaim all warranties, express or implied, including:

  • That the service will be uninterrupted, error-free, or secure at all times
  • That any documents generated (quotes, invoices, etc.) are suitable for any particular legal or tax purpose
  • That the platform meets your specific business requirements

SoloTrader is a tool to help you manage your business. It does not constitute legal, tax, or financial advice. You should consult a qualified professional for advice specific to your situation.

🛡️ Limitation of Liability

To the fullest extent permitted by applicable law, Oliver Simpson (trading as SoloTrader) shall not be liable for any:

  • Loss of profits, revenue, or business
  • Loss of data or corruption of data
  • Indirect, incidental, special, or consequential loss or damage
  • Losses arising from your reliance on documents or calculations generated by the platform

Our total aggregate liability to you under or in connection with these Terms shall not exceed the total subscription fees paid by you in the 12 months immediately preceding the event giving rise to the claim.

Nothing in these Terms excludes or limits our liability for death or personal injury caused by our negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be excluded or limited under English law.

🔚 Termination

By you: You may terminate your account at any time by cancelling your subscription and contacting us to request deletion of your account and data.

By us: We may suspend or terminate your account immediately and without notice if you breach these Terms, engage in fraudulent activity, or if we are required to do so by law. In such cases, no refund will be provided.

On termination, your right to use SoloTrader ceases immediately. We will retain and delete your data in accordance with our Privacy Policy.

🔄 Changes to These Terms

We may update these Terms at any time. We will notify you of material changes by email or via an in-app notice at least 14 days before the changes take effect. Your continued use of SoloTrader after the effective date constitutes acceptance of the revised Terms.

If you do not agree with the updated Terms, you must stop using the service and cancel your subscription before the effective date.

⚖️ Governing Law & Disputes

These Terms are governed by and construed in accordance with the laws of England and Wales. Any disputes arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.

Before initiating any formal proceedings, we encourage you to contact us first at [email protected] so we can attempt to resolve the issue amicably.

📬 Contact Us

For questions about these Terms, to exercise your legal rights, or to raise a complaint:

  • Email: [email protected]
  • Post: Oliver Simpson (trading as SoloTrader), 9 Cliff Road, SS9 1HJ, England