Privacy Policy
Last updated: 8 July 2026
Small Garage Software is committed to protecting your privacy. This notice explains how we collect, use and safeguard your personal data when you visit our website or use our services, and sets out your rights under UK data protection law. Please read it carefully. Where we need to, we may give you additional, more specific privacy information when we collect your data — this notice supplements those and does not override them.
Our website and services are intended for businesses and are not directed at children; we do not knowingly collect data about anyone under 18.
1. Who we are
Ray Harding, trading as Small Garage Software, is the controller responsible for your personal data. Our Privacy Officer, Mr Ray Harding, oversees any questions about this notice. Please use the details below to contact us, including to exercise any of your rights:
Ray Harding T/A Small Garage Software
99 Kilmersdon Road
Radstock, Somerset BA3 3QP
United Kingdom
Email: privacy@smallgaragesoftware.co.uk
Phone: 01761 432123
You have the right to complain at any time to the Information Commissioner's Office (ICO), the UK regulator for data protection (www.ico.org.uk). We would appreciate the chance to resolve any concern first, so please contact us before approaching the ICO.
This notice was last updated on 8 July 2026. It is important that the data we hold about you stays accurate, so please keep us informed of any changes.
Our website may link to third-party sites, plug-ins or applications that we do not control. Following those links may allow third parties to collect data about you, and we are not responsible for their privacy practices — please read the privacy notice of any site you visit.
2. The data we collect about you
Personal data means information from which you can be identified; it does not include data that has been anonymised. We may collect and use:
•
Identity Data — your name and title.
•
Contact Data — billing/postal address, email address and telephone number.
•
Business Data — your company or trading name and the registration/serial linked to your licence.
•
Transaction Data — details of the payments you make to us and the products and services you have purchased.
•
Technical Data — limited technical information such as your IP address and details recorded in our server logs and by the essential cookies described in our Cookie Policy.
•
Account Data — your login credentials, account preferences and any feedback you give us.
We do not collect special category data (such as data about health, ethnicity, beliefs or biometrics) or data about criminal convictions.
Where we need personal data to enter into or perform a contract with you and you do not provide it, we may be unable to supply the product or service — we will tell you if that is the case.
3. How your personal data is collected
•
Directly from you — when you create an account, buy or subscribe to a product, contact us, or give us feedback.
•
Automatically — limited technical data through our essential cookies and server logs when you use the website (see our Cookie Policy).
•
From our payment provider — Square provides us with the transaction data needed to take and reconcile your payments.
We do not use advertising or analytics providers, and we do not buy personal data about you from third parties.
4. How we use your personal data
We only use your personal data where the law allows. In practice we rely on one or more of: performing our contract with you; our legitimate interests (where these are not overridden by your rights); and complying with our legal obligations. We do not rely on consent for the communications below — but you can opt out of feature and upgrade emails at any time using the unsubscribe link or by contacting us.
| Purpose | Data used | Lawful basis |
|---|
| Set up and manage your account and licence | Identity, Contact, Business | Performance of a contract |
| Take payment, issue your licence, and recover any money owed | Identity, Contact, Transaction | Performance of a contract; and legitimate interests (recovering debts owed to us) |
| Manage our relationship, including telling you about changes to our terms or this notice, and asking for feedback | Identity, Contact, Account | Performance of a contract; legal obligation; legitimate interests (keeping our records accurate) |
| Keep you informed about upgrades, new features and changes to the software you hold | Identity, Contact | Legitimate interests (keeping you informed about the product you use) — you can opt out at any time |
| Run, secure and improve our business and website (support, troubleshooting, fraud prevention, IT and hosting) | Identity, Contact, Technical | Legitimate interests; legal obligation |
Cookies. You can set your browser to refuse some or all cookies, but parts of the website may then not work properly. See our Cookie Policy for details.
Change of purpose. We will only use your personal data for the purposes we collected it for, unless a new purpose is compatible. If we need to use it for something unrelated, we will tell you and explain the legal basis.
5. Who we share your personal data with
We may share your personal data with:
•
Square, our payment processor, to take and manage your payments.
•
Professional advisers such as accountants, lawyers and insurers, where needed.
•
HMRC, regulators and other authorities, where the law requires.
•
A buyer or successor, if we ever sell, transfer or merge parts of our business.
We also offer a remote-support service that, with your agreement, lets us access your PC to help you. We do not collect your data during a support session. Only on rare occasions may we need a backup of data for diagnostic or repair purposes; where we do, it is used solely for that purpose and securely destroyed once the work is complete.
We require everyone we share data with to keep it secure and use it only for the purposes we specify, and not for their own.
6. International transfers
Most of your personal data is stored and processed within the UK and the European Economic Area. Some data is transferred outside the UK — in particular, our payment processor, Square, is based in the United States, so payment and transaction data is processed there. Where data leaves the UK, we ensure it is protected by appropriate safeguards recognised under UK data protection law (such as the UK International Data Transfer Agreement or an adequacy decision).
7. Data security
We use appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, alteration or disclosure, and we limit access to those who need it. We have procedures to handle any suspected data breach and will notify you and the ICO where we are legally required to.
8. Data retention
We keep your personal data only for as long as necessary for the purposes we collected it, including to meet legal, accounting and reporting requirements. By law we must keep basic customer data (Identity, Contact and Transaction Data) for six years after you stop being a customer, for tax purposes. In some cases you can ask us to delete your data, or we may anonymise it for statistical purposes and keep it indefinitely.
9. Your legal rights
Under UK data protection law you have the right to: request access to your personal data; ask us to correct it; ask us to erase it; object to or restrict our processing; request the transfer of your data; and, where we rely on consent, withdraw it. To exercise any of these, please contact us using the details above. There is usually no fee, and we aim to respond within one month. We may need to confirm your identity first, as a security measure.
10. Glossary
•
Performance of a contract — processing necessary to fulfil a contract with you, or to take steps at your request before entering one.
•
Legitimate interests — our interest in running and managing our business to give you a good, secure service, weighed against your rights and freedoms.
•
Legal obligation — processing necessary to comply with a law or regulation that applies to us.