1. Who we are
Monosphere Ltd (“QuoteChase”, “we”, “us”) is a company registered in England and Wales (company number 16315949), registered office 3 Broadway East, Chester, United Kingdom, CH2 2DW.
For questions about this policy or your personal data, contact us at support@quotechase.co.uk.
2. Our two roles: controller and processor
QuoteChase has two distinct data protection roles, and it matters which one applies to a given piece of data:
- We are the data controller for the personal data of our account holders (the tradespeople and trade businesses who subscribe), including the account, business, billing and usage data described below. This policy governs that data.
- We are a data processor for the personal data of your Customers that you, as an account holder, put into QuoteChase. There, you are the controller and you decide why and how that data is used. We only process it on your instructions, under our Data Processing Agreement. Customers who want to exercise their rights should contact the relevant business, not us; we will direct them accordingly.
- We are also the controller for the account data of team members invited to a Pro account (their email address and sign-in details), and for the limited technical data we process for our own security, fraud prevention, fault diagnosis and cookieless analytics when anyone, including a Customer, visits our pages.
3. What we collect about account holders
| Category | Examples |
|---|---|
| Identity and contact | Your name, business name, email, phone, business address, and the email address of any team member you invite |
| Account and profile | Login credentials (held by our auth provider), logo, branding and settings |
| Financial display details | The bank account name, sort code and account number you choose to show on your invoices |
| Billing | Subscription plan, payment status and Stripe customer and connected-account identifiers (card details are held by Stripe, not by us) |
| Usage and content | Quotes, invoices, customer records and activity you create, plus logs of how you use the Service |
| Technical | IP address, device and browser information, and cookies needed to run the app |
| Error and diagnostic data | When something goes wrong in the app, technical details of the error and a masked recording of the screen at that moment (text and form inputs are hidden) so we can find and fix the fault |
| Support and marketing | Messages you send us, contact-form and free-tool submissions, and marketing preferences |
4. How we use your data and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Providing the Service, your account and support | Performance of our contract with you |
| Taking payment and managing your subscription | Performance of our contract with you |
| Securing the Service, preventing fraud and abuse, and improving the product | Our legitimate interests in running a safe, reliable service |
| Sending service and administrative messages (for example billing and security notices) | Performance of our contract, and legitimate interests |
| Sending marketing about QuoteChase to prospects and, where allowed, existing customers | Consent, or our legitimate interests in promoting our business, with an opt-out in every marketing message |
| Meeting legal, tax and accounting obligations and resolving disputes | Compliance with a legal obligation, and our legitimate interests |
Where we rely on legitimate interests, we have considered the impact on you and you can object at any time (see your rights below).
5. Enquiries, free tools and the lead inbox
If you use our contact form or a free tool (such as the Letter Before Action template), we receive the details you submit at our internal lead inbox so we can respond and, where you have agreed, send you relevant information about QuoteChase. You can ask us to stop and to delete these details at any time.
If you open our free 14-day demo, we keep the name, business name, email address and phone number you give us, any branding you add (such as your logo), and a record of when you opened the demo and which features you tried. We use this to run your demo, to email you a link back into it, and to contact you about QuoteChase, which is in our legitimate interests in following up a demo you asked for. The sample customers, quotes and invoices inside the demo are fictional and stay in your browser; nothing in the demo is sent to anyone. To count visits to the demo page we use a hash of your IP address and browser that changes every day, not a cookie, and we do not store your IP address. You can ask us to delete your demo details at any time.
7. International transfers
Some providers process data outside the UK. Where they do, we rely on an appropriate safeguard recognised under UK data protection law, such as UK adequacy regulations (including the UK extension to the EU-US Data Privacy Framework, known as the UK-US Data Bridge, where a provider is certified under it), the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, so your data receives a standard of protection that is not materially lower than in the UK.
8. How long we keep data
We keep account data for as long as your account is active. After cancellation or lapse, your account is read-only for a 30 day retention window and then deleted, but never automatically until a warning email has been delivered to the account owner at least 10 days beforehand, except for limited records we must keep to meet legal, tax or accounting obligations or to resolve disputes. The account owner can also delete the account immediately from settings. Billing records are typically retained for at least six years to meet UK tax requirements. Error and diagnostic data is held by our monitoring provider for a short, fixed period and then deleted. Marketing and enquiry data is kept until you opt out or ask us to delete it.
9. Security
We take appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls, row-level security so each account can only see its own data, unguessable tokens for public links, and rate limiting. No system is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond quickly to any incident.
10. Your rights
Where we are the controller of your data, you have the right to: access a copy of your data; have inaccurate data corrected; have data erased in certain circumstances; restrict or object to processing; data portability; and withdraw consent where we rely on it. To exercise these rights, contact support@quotechase.co.uk. You can also export your data as CSV from settings at any time.
You also have the right to complain to us about how we handle your personal data. Email support@quotechase.co.uk with the word complaint in the subject line, or use the contact form on our website. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.
If you are not satisfied, you can complain to the Information Commission, the UK data protection regulator (formerly the Information Commissioner's Office), at ico.org.uk, although we would welcome the chance to put things right first.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.
12. Children
QuoteChase is a business tool and is not intended for children. We do not knowingly collect data about children through the Service.
13. Changes to this policy
We may update this policy. We will post the new version with an updated effective date and, for significant changes, take reasonable steps to tell you.
This document is provided for transparency and does not constitute legal advice. If you need advice on your own circumstances, consult a qualified solicitor.