Who we are
This policy explains how Billora (“we”, “us” and “our”) handles personal data. We are based in London, SW6 7RX.
We are the data controller for the account, enquiry and website-use data described in this policy. Our role when handling your customers’ data is explained below.
If you have any questions about this policy or your personal data, email Khalidkeyse1@gmail.com.
What we collect
When you create an account
- Your name, business name and email address.
- Your mobile number, if you choose to give it.
- Your password, which we store only as a secure one-way hash. We can never see it.
- A referral code, if you enter one.
When you sign in with Google or Apple
If you choose to sign in with Google or Apple, they send us your name, your email address and an account identifier. If you use Apple’s “Hide My Email”, we receive a private relay address instead of your real one. We never receive your Google or Apple password.
When you contact us
Your name, email address, any phone number or business name you give us, and your message.
When you use the website
- A session cookie that keeps you signed in (see Cookies).
- Your IP address, which we use briefly to stop people guessing passwords or flooding our forms. Our hosting provider may also record it in its security logs.
We don’t use advertising trackers or third-party analytics, and we don’t buy data about you from anyone.
How we use it, and our legal reasons
| What we do | Legal basis (UK GDPR) |
|---|---|
| Create and run your account, sign you in, and provide Billora | Performance of a contract with you |
| Send emails you need, such as password resets and important service notices | Performance of a contract |
| Reply to messages and demo requests | Our legitimate interest in answering enquiries, or steps you’ve asked us to take before a contract |
| Keep Billora secure: stopping fraud, abuse and password guessing | Our legitimate interest in protecting our service and users |
| Keep financial records once you’re a paying customer | Legal obligation |
| Send product news or offers | Only with your consent, which you can withdraw at any time |
Who we share it with
We don’t sell personal data. We share it only with service providers who help us run Billora, under contracts that require them to protect it and use it only on our instructions:
- Hosting and database: [HOSTING PROVIDER], which runs our website and stores our data.
- Email delivery: [EMAIL PROVIDER], which sends our emails, such as password resets.
- Google and Apple: only if you choose to sign in with them. Their own privacy policies cover what they do.
- Payment providers: when you take or make payments through Billora. They act under their own terms.
We may also share data if the law requires it, for example with HMRC or the police, or to protect our rights. If we sell or merge our business, your data may pass to the new owner, who will be bound by this policy.
International transfers
Some of our providers may process data outside the UK. When they do, we make sure it’s protected, for example by using countries the UK recognises as having adequate protection, or the UK’s International Data Transfer Agreement or Addendum.
How long we keep it
- Account data: while your account is open. When you delete your account, we remove it straight away from the live system. Backups are overwritten within 30 days.
- Sign-in sessions: up to 14 days, or until you sign out.
- Password reset links: they expire after 1 hour and work once.
- Messages to us: up to 2 years, so we can follow up on earlier conversations.
- Financial records: 6 years, as UK tax law requires.
Your customers’ data
When you use Billora to run your business, you’ll add details about your own customers, such as names, contact details, addresses, quotes, invoices, job notes, photos and signatures. When your customer opens a quote or invoice link you send them, we process what they do there (for example accepting a quote and the name they type) on your behalf. For that data, you are the data controller and we are your processor. We process it only to provide Billora to you, as set out in our Terms. If your customers ask about their data, please speak to them directly, and we’ll help you respond.
Cookies
We only use what’s strictly necessary to make Billora work, so we don’t need to ask for consent. We don’t use advertising or analytics cookies.
| Name | Type | Why | How long |
|---|---|---|---|
billora.sid | Cookie | Keeps you signed in, and protects sign-in with Google and Apple | Up to 14 days |
billora-cookie-notice | Browser storage | Remembers that you’ve seen the cookie notice | Until you clear it |
If you click Continue with Google or Continue with Apple, Google or Apple may set their own cookies on their websites to sign you in. Their privacy policies explain how they use them.
You can block or delete cookies in your browser settings, but you won’t be able to stay signed in without the session cookie.
Security
All traffic to Billora is encrypted with HTTPS. Passwords are hashed. Reset links are single-use and stored only in hashed form. Sign-ins from Google and Apple are checked against their digital signatures. Access to our systems is limited to the people who need it. No system is perfectly secure, but we take protecting your data seriously. If something ever goes wrong, we’ll tell you and the ICO when the law requires it.
Your rights
Under UK data protection law, you have the right to:
- Access the personal data we hold about you.
- Correct anything that’s wrong.
- Delete your data. You can delete your account yourself from your dashboard.
- Restrict or object to how we use it.
- Port your data: receive it in a common format, or have it sent to someone else.
- Withdraw consent at any time, where we rely on consent.
To use any of these rights, email Khalidkeyse1@gmail.com. We’ll reply within one month. It’s free, unless a request is clearly unfounded or excessive.
If you’re unhappy with how we’ve handled your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Billora is a service for businesses and isn’t intended for anyone under 18.
Changes and contact
We’ll update this policy when the way we handle data changes, and change the date at the top. If a change matters, we’ll tell account holders by email before it takes effect.
Questions about this policy or your personal data? Email Khalidkeyse1@gmail.com or call 07899230714.