LEGAL
Privacy Policy
Last updated: May 2026
Who we are
Steadmate is a trading name of Steadmate Ltd, a company registered in England and Wales. Our registered address is [Registered Address Placeholder]. You can contact us at [email protected].
What information we collect
When you use our website or contact us, we may collect: your name, phone number and email address when you submit our contact form; enquiry and message content you provide; and technical data such as your IP address and browser type collected automatically by our hosting provider.
When we provide the Steadmate service to business clients, we process operational data on their behalf including customer enquiry records, lead details, booking information, message logs and business contact information. This data is processed as a data processor acting on the instructions of our clients.
How we use your information
We use the information you provide to respond to your enquiry, provide and improve the Steadmate service, send service-related communications, and comply with our legal obligations. We do not use your information for any other purpose without your consent.
Who we share your information with
We use a small number of trusted third party services to operate Steadmate. These include: Supabase (database and infrastructure, EU West region), Twilio (WhatsApp and SMS delivery), Google (calendar, drive and email integrations), Meta (WhatsApp Business API, Facebook and Instagram integrations), Stripe (payment processing), Xero and QuickBooks (accounting integrations where enabled), and Vercel (website hosting). Each of these providers processes data only as necessary to deliver the service and is subject to appropriate data protection agreements.
We do not sell your personal data to any third party.
Where your data is stored
Your data is stored on servers located in the EU West region. We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure.
How long we keep your data
Website enquiry data is kept for as long as necessary to respond to your enquiry and for a reasonable period thereafter. Service client data is retained for the duration of the contract and deleted within 30 days of cancellation. You may request deletion of your data at any time by contacting [email protected].
Your rights
Under UK GDPR you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, object to or restrict our processing of your data, and request a copy of your data in a portable format. To exercise any of these rights please contact [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office at ico.org.uk.
Cookies
Our website uses only essential cookies necessary for the site to function. We do not use advertising or tracking cookies. No cookie consent banner is required.
Mobile App
The Steadmate mobile app (available on iOS and Android) collects and processes the following data in addition to the information described above:
Camera: The app requests camera access to allow you to photograph receipts and expenses. Images are processed to extract vendor and amount information and are stored securely on our servers. Camera access is only used when you explicitly initiate a photo capture.
Calendar: The app requests access to your Google or Microsoft Outlook calendar to display your schedule and allow you to create, edit and delete calendar events. Calendar data is read and written only on your instruction and is not used for any other purpose.
Push notifications: The app may send push notifications to alert you to new leads, booking requests, and other business events. You can disable notifications at any time in your device settings.
Data stored on device: The app stores a session token on your device using secure encrypted storage to keep you logged in. It also caches calendar data locally to improve performance. This data is cleared when you log out.
Third party SDKs: The app uses Expo (React Native framework), which may collect anonymised diagnostic data. No advertising SDKs are used.
ICO Registration
Steadmate Ltd is registered with the Information Commissioner's Office. Registration number: C1905479.
Google API Data Disclosure
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
Changes to this policy
We may update this policy from time to time. The date at the top of this page will always reflect the most recent version. Continued use of our services after an update constitutes acceptance of the revised policy.
Contact
For any questions about this privacy policy or how we handle your data, please contact us at [email protected].