- Who we are
- What we collect
- How & why we use it (legal bases)
- Who we share it with
- International transfers
- Automated decisions
- How long we keep it
- Data security
- Your rights
- Cookies
- Children
- Changes
Who we are
Fettle is operated by RSA Business Services Ltd (“we”, “us”), a company registered in England and Wales (company number: 16991914). We are the data controller for the personal information described below.
Contact for any privacy question: hello@fettlemoney.co.uk
What we collect
On the waitlist (today):
- Your email address, when you join the waitlist.
- Your £5 deposit, processed by Stripe — we receive confirmation of payment but do not store your card details ourselves.
- Anything you send us directly by email.
Once the app is live (future):
- Account information: name, email, and authentication details.
- Financial data via Open Banking: read-only access to transaction history, balances, and account details — shared with us only after you explicitly authorise the connection through your bank’s own secure login, and revocable by you at any time.
- Usage and device data: how you use the app, to keep it secure and improve it.
How & why we use it (legal bases under UK GDPR)
- To run the waitlist and honour the £5 deposit (including refunds) — basis: contract.
- To send you Fettle updates — basis: consent, which you can withdraw at any time via the unsubscribe link or by emailing us.
- Once live, to calculate your Safe to Spend figure, spot money leaks, and power Ask Fettle — all computed from your own data — basis: contract. We never use your identifiable financial data to train models for other users without separate, explicit consent.
- To keep Fettle secure and improve it, and to prevent fraud — basis: legitimate interests, balanced against your rights.
- To meet legal and regulatory obligations (e.g. financial-crime prevention, record-keeping) — basis: legal obligation.
Who we share it with
- Payment processing: Stripe, to take the £5 deposit.
- Waitlist form: Formspree, which receives your email address when you join the waitlist.
- Hosting: Netlify, where this website is hosted.
- Open Banking (once the app is live): [Open Banking provider — e.g. TrueLayer / Yapily], an FCA-authorised provider, to connect to your bank.
- We never sell personal data, and never share financial data with advertisers. We may share data where required by law or to protect our rights. Any future data-sharing (e.g. an accountant referral) will always be a separate, explicit choice you make.
International transfers
Some of our providers — including Stripe, Formspree and Netlify — may process data outside the UK, including in the United States. Where they do, we rely on appropriate safeguards required by UK data protection law, such as the UK International Data Transfer Agreement / Addendum or a UK adequacy decision, so your data receives an equivalent level of protection. [Confirm the exact mechanism with each provider’s Data Processing Agreement.]
Automated decisions
Fettle’s figures and suggestions (like Safe to Spend) are informational tools to help you decide — not automated decisions that produce legal or similarly significant effects about you. We do not carry out solely-automated decision-making of that kind without a lawful basis and appropriate safeguards, and we’ll tell you if that ever changes.
How long we keep it
- Waitlist emails: until you unsubscribe or ask us to delete them.
- Payment records: as required for tax and accounting law (typically 6 years).
- Account and transaction data (once live): for the life of your account, plus any period required by law after closure.
- You can request deletion at any time — see “Your rights”.
Data security
We protect your information with encryption in transit, access controls, and reputable, security-vetted providers. Open Banking connections are read-only and authorised through your bank. No system is ever completely secure, but if a personal data breach affects your rights we will notify the ICO, and you where required, without undue delay.
Your rights (UK GDPR)
You have the right to access the data we hold on you, correct it, ask us to delete it, restrict or object to processing, withdraw consent, and request portability. To exercise any of these, email hello@fettlemoney.co.uk — we’ll respond within one month. You can also complain to the Information Commissioner’s Office (ICO) if you believe we’ve mishandled your data.
Cookies
The waitlist site uses only strictly-necessary cookies needed for it to function, so no consent banner is required. We do not use third-party advertising or tracking cookies. [If you add analytics or any non-essential cookies, you must add a PECR-compliant consent banner and list them here.]
Children
Fettle is not directed at, and does not knowingly collect data from, anyone under 18.
Changes to this policy
We’ll post any changes here and, for material changes, email active users directly.