Privacy Policy

Last updated: 1 November 2026

Who we are

This policy covers Sure Thing Limited, registered in England and Wales with company number 16207531. Our registered office address is shown in our Terms & Conditions. Sure Thing Limited is run by its director, Katie Sotiris.

Our role

For running our own business (finances, insurance, legal obligations and keeping in touch with clients and contacts), we are a data controller.

When we provide finance services to a client and handle personal data on their behalf, such as staff or customer details, we act as a data processor. In that case our contract with the client sets out how that data is handled.

What information we hold

Depending on how we work together, we may hold:

• Your name, job title and contact details
• Personal data about your staff or customers, where our work requires it
• Confidential business and financial information

We keep data electronically wherever possible. We don't collect or store card details when you pay an invoice.

Why we use it

• To reply to you and discuss working together
• To deliver the services in our contract with you
• To invoice and process payments
• To meet our own legal, tax and accounting obligations
• To give or request references, with your consent

Where we store it

We keep information in the UK or European Economic Area where possible. Some of the systems we use store data internationally, and each provides safeguards that meet UK data protection requirements. Our main systems are:

• Xero (accounting)
• Google Workspace (email and documents)
• Cloudflare (website hosting)

Where a client already has its own systems, we usually work within those.

How long we keep it

• Client data where you are the controller: for as long as you require, then returned or deleted at the end of our work
• General correspondence: no longer than needed
• Contracts: 7 years from the end of the contract
• Accounting records: 6 years from the end of the accounting year

How we protect it

We use strong passwords, two-factor authentication on key systems, encrypted devices, access controls and written contracts with suppliers. We don't use your information for profiling or automated decision-making.

Who can see it

Only Sure Thing Limited has routine access to your data. Trusted third parties (for example, our accountant) may occasionally see it for business purposes. We don't share your information with anyone else unless you ask us to, you consent, or the law requires it.

This website

This website doesn't use cookies, analytics or tracking. Our hosting provider, Cloudflare, processes basic technical information such as IP addresses to deliver and secure the site.

Your rights

You have the right to be informed about how we use your data, to see the data we hold about you, and to ask us to correct it. In certain circumstances you can also ask us to erase it, restrict how we use it, transfer it, or stop using it.

To exercise any of these rights, email [email protected].

You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.