Privacy Policy
Last updated: June 2026
BizBook Pro ("we", "us", "our"), operated by C-Carpenter, respects your privacy and is committed to protecting your personal data. This policy explains what we collect, how and why we use it, who we share it with, how long we keep it, and the rights you have under the UK GDPR, the Data Protection Act 2018 and comparable data-protection laws worldwide.
1. Who we are
BizBook Pro is a multi-company payroll, expenses and business-finance platform. C-Carpenter is the data controller for account and billing data. For the business data you enter about your own employees and suppliers, you are the controller and we act as your processor under a data-processing arrangement forming part of these terms.
2. Data we collect
Account data (name, email, hashed password, language and preferences); company and ledger data you enter (company details, employees, payroll, expenses, contracts, advances, logos); billing data (plan, subscription status and Stripe customer references — we never store full card numbers); and technical data (IP address, device and browser type, timestamps and usage logs).
3. How we use your data
To create and secure your account, provide and maintain the service, process subscriptions and payments, generate documents such as payslips, send transactional emails (invitations, password resets, payslips), prevent fraud and abuse, meet legal and tax obligations, and improve the product. We do not sell your personal data and we do not use your business ledger data for advertising.
4. Legal bases
We rely on: performance of our contract with you; our legitimate interests in running and securing the service; your consent where required (for example non-essential communications); and compliance with legal obligations such as accounting and tax record-keeping.
5. Sharing & sub-processors
We share data only with trusted sub-processors acting on our instructions: Stripe (payment processing), our cloud hosting and database providers, and our email-delivery infrastructure. We may disclose data where required by law or to protect our rights. We do not transfer your data to third parties for their own marketing.
6. International transfers
Where data is processed outside the UK/EEA, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses to ensure your data remains protected.
7. Retention
We keep account and ledger data for as long as your account is active. After closure we retain data only as long as necessary for legal, tax and accounting obligations (payroll and tax records are typically retained for several years) and then delete or anonymise it.
8. Security
We protect data with encryption in transit, hashed passwords, access controls and isolated per-company workbooks. No system is perfectly secure, so we cannot guarantee absolute security, but we take reasonable and appropriate measures.
9. Your rights
Subject to law you may request access, rectification, erasure, restriction, portability and object to certain processing, and withdraw consent at any time. You may also complain to your data-protection regulator (in the UK, the ICO).
10. Contact
To exercise your rights or ask any privacy question, contact us at info@c-carpenter.com.