Your Data, Your Rights.
At Setora, we believe your data belongs to you — not us. Here’s exactly how we handle it under UK GDPR.
Under UK GDPR, you’re in control.
As a UK-based service, we comply fully with UK GDPR. You and your customers have the following rights over your data.
Access
Request a full copy of all data we hold.
Rectification
Correct any inaccurate information.
Erasure
Request deletion of all your data — the "right to be forgotten".
Portability
Export your data in a standard format so you’re never locked in.
Restriction
Ask us to limit how we process your data.
Objection
Object to any processing you’re not comfortable with.
No lock-in. Ever.
We think vendor lock-in is wrong. You can export your full customer list, booking history, and business data at any time in CSV format. If you ever leave Setora, your data leaves with you.
Active accounts
We keep your data for as long as your account is active.
Cancelled accounts
Your account enters a 60-day read-only data access period for export, then data is deleted from live systems within 30 days and from backups within a further 30 days, unless we’re legally required to retain certain records (e.g. financial records for HMRC).
Customer booking data
Managed by you. You can delete individual customer records at any time from your dashboard.
Who handles what.
Laravel Cloud
Application backend · EU (London)
Vercel
Marketing site & booking platform hosting · EU/UK
Stripe
Payment processing · EU/UK
Clerk
Authentication · EU/UK
Crisp IM S.A.S.
Live chat widget (marketing site) · France/EU
PostHog
Website & product analytics · EU (Frankfurt)
How we protect it.
We protect your data with encryption in transit (TLS) and at rest, role-based access controls, and regular security reviews. We will never access your account data without your explicit permission.
We use optional cookies on the marketing website (Google Analytics, live chat, and ads attribution) only with your explicit consent. You can decline these and the site works fully without them. We also use EU-hosted PostHog in cookieless mode for marketing-site analytics. On booking pages, we do not use optional marketing cookies.
Email us at hello@setora.co.uk with your request. We’ll respond within 30 days, usually much sooner.
Setora Technology Ltd, 61 Bridge Street, Kington, HR5 3DJ, United Kingdom. If we make significant changes to this policy, we’ll notify you by email at least 14 days in advance.