Your data, your rights.

At Setora, we believe your data belongs to you, not us. Here’s exactly how we handle it under UK GDPR.

As a UK-based service, we comply fully with UK GDPR. You and your customers have the following rights over your data.

  1. Access: Request a full copy of all data we hold.
  2. Rectification: Correct any inaccurate information.
  3. Erasure: Request deletion of all your data, the "right to be forgotten".
  4. Portability: Export your data in a standard format so you’re never locked in.
  5. Restriction: Ask us to limit how we process your data.
  6. Objection: Object to any processing you’re not comfortable with.

We think vendor lock-in is wrong. You can export your full customer list, booking history, and business data at any time in CSV format. If you ever leave Setora, your data leaves with you.

  • Active accounts: We keep your data for as long as your account is active.
  • Cancelled accounts: Your account enters a 60-day read-only data access period for export, then data is deleted from live systems within 30 days and from backups within a further 30 days, unless we’re legally required to retain certain records (e.g. financial records for HMRC).
  • Customer booking data: Managed by you. You can delete individual customer records at any time from your dashboard.
  • Laravel Cloud: Application backend. Data location: EU (London).
  • Vercel: Marketing site & booking platform hosting. Data location: EU/UK.
  • Stripe: Payment processing. Data location: EU/UK.
  • Clerk: Authentication. Data location: EU/UK.
  • Crisp IM S.A.S.: Live chat widget (marketing site). Data location: France/EU.
  • PostHog: Website & product analytics. Data location: EU (Frankfurt).

Data security

We protect your data with encryption in transit (TLS) and at rest, role-based access controls, and regular security reviews. We will never access your account data without your explicit permission.

Cookies and tracking

We use optional cookies on the marketing website (Google Analytics, live chat, and ads attribution) only with your explicit consent. You can decline these and the site works fully without them. We also use EU-hosted PostHog in cookieless mode for marketing-site analytics. On booking pages, we do not use optional marketing cookies.

How to make a request

Email us at hello@setora.co.uk with your request. We’ll respond within 30 days, usually much sooner.

Contact and changes

Setora Technology Ltd, 61 Bridge Street, Kington, HR5 3DJ, United Kingdom. If we make significant changes to this policy, we’ll notify you by email at least 14 days in advance.