Privacy policy
How SAFI handles personal information.
1. Who we are
SAFI is provided by Sycamore Interiors Ltd. For the information a business enters about its own customers, suppliers and staff, that business decides what is collected and why (it is the "controller"), and we process it on its behalf (we are the "processor"). For the sign-in details of the people who use SAFI, we are the controller. Contact: info@sycamoreinteriors.co.uk.
2. What we hold
- Account information: the name or email address people sign in with, their access level, and a securely scrambled form of their password (we cannot read it).
- Business information you enter: customers, suppliers, products and stock, purchase orders, sales orders, invoices and work orders, your company details, and bank details you choose to put on documents. This includes names, contact details and addresses of your customers and suppliers.
- QuickBooks connection information (only if you connect): your QuickBooks company ID, the connection permissions Intuit gives us, and the connection tokens, which are stored encrypted.
3. QuickBooks data
If an administrator connects QuickBooks, SAFI sends customer details (name, contact name, email, phone and address) and invoices (lines, amounts and VAT) to your QuickBooks company, and reads back the company's basic details and the total and balance of the invoices it sent. It does not read or change other QuickBooks data. We use QuickBooks data only to provide this connection to you. We do not sell it, use it for advertising or share it with anyone else. Disconnecting deletes the stored connection tokens and asks Intuit to revoke them.
4. How we use information
To provide and secure the service, to keep your records, to send data to QuickBooks when you ask us to, and to support you. We do not use your information for advertising or to build profiles.
5. Where it is kept and how it is protected
Information is stored in Microsoft Azure in the UK. Each business's data is kept in its own separate database. It is sent over encrypted (HTTPS) connections, QuickBooks connection tokens are encrypted when stored, and access within a business is limited by access level. No method of storage or transmission is perfectly secure, but we work to protect your information and will tell you promptly if a breach affects it.
6. Who else is involved
- Microsoft Azure hosts the service and database.
- Intuit (QuickBooks) receives the data described in section 3, only when you connect it and under your agreement with them.
- Our pages load text fonts from Google Fonts and styling from the Tailwind CDN, so your browser contacts those services when a page opens.
We do not share personal information with anyone else, except where the law requires it.
7. Cookies
We use only the cookies the service needs to work: one that keeps you signed in, and security cookies that protect forms and the QuickBooks sign-in step. We do not use advertising or analytics cookies.
8. How long we keep it
We keep information while your business uses SAFI. After your agreement ends we will delete or return it [period to be confirmed, e.g. within 30 days of a request], unless the law requires us to keep something longer.
9. Your rights
Under UK data protection law you can ask to see the personal information held about you, to correct it, to have it deleted or restricted, to object to its use, and to receive a copy of it. If your information is held by a business that uses SAFI, contact that business first. We will help it respond. You may also complain to the Information Commissioner's Office (ico.org.uk) if you are unhappy with how your information is handled.
10. Changes
We may update this policy. We will change the date at the top and, for significant changes, tell you before they take effect.
11. Contact
For any question about this policy or your information, email info@sycamoreinteriors.co.uk.