Privacy Policy

1. Who We Are

Hustle. is a cloud-based invoicing and customer relationship management (CRM) platform operated by Elevated Software Limited ("we", "us", "our"), a company registered in England and Wales.

For the purposes of data protection law, Elevated Software is the data controller responsible for your personal data.

Contact details:

• Email: contact@hustle-app.co.uk
• Website: www.hustle-app.co.uk

2. What Data We Collect

We collect and process the following categories of personal data:

2.1 Account Information

• Name
• Email address
• Password (encrypted)
• Business name and details
• Business address
• Phone number (optional)

2.2 Billing Information

• Payment card details (processed securely by Stripe; we do not store full card numbers)
• Billing address
• Transaction history

2.3 Client Data You Store

When you use Hustle, you may store information about your clients, including:

• Company names and addresses
• Contact names, email addresses, and phone numbers
• Invoice details and payment history

You are the data controller for your client data. We process this data on your behalf as a data processor.

2.4 Usage Data

• IP address
• Browser type and version
• Device information
• Pages visited and features used
• Date and time of access

2.5 Cookies

We use essential cookies to keep you logged in and ensure the platform functions correctly. We do not use tracking or advertising cookies. See our Cookie section below for more details.

3. How We Use Your Data

We use your personal data for the following purposes:

Purpose	Legal Basis
To create and manage your account	Contract performance
To provide the invoicing and CRM service	Contract performance
To process subscription payments	Contract performance
To send service-related emails (e.g., payment confirmations, important updates)	Contract performance / Legitimate interests
To respond to your enquiries and provide support	Contract performance / Legitimate interests
To improve and develop our service	Legitimate interests
To ensure security and prevent fraud	Legitimate interests / Legal obligation
To comply with legal obligations	Legal obligation

4. Who We Share Your Data With

We may share your personal data with the following third parties:

4.1 Service Providers

• Stripe: Payment processing (PCI DSS compliant)
• Cloud hosting provider: Secure data storage and infrastructure
• Email service provider: Transactional emails

4.2 Legal Requirements

We may disclose your data if required by law, regulation, legal process, or government request, or to protect our rights, property, or safety, or that of our users or the public.

4.3 Business Transfers

If Elevated Software is involved in a merger, acquisition, or sale of assets, your data may be transferred. We will notify you of any such change and any choices you may have.

We do not sell your personal data to third parties.

5. International Data Transfers

Your data is primarily stored and processed within the United Kingdom and European Economic Area (EEA). If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO)
• Transfers to countries with an adequacy decision

6. Data Retention

We retain your personal data for as long as necessary to provide the service and fulfil the purposes described in this policy:

• Account data: Retained while your account is active and for 30 days after deletion to allow recovery
• Billing records: Retained for 7 years as required by UK tax law
• Usage logs: Retained for up to 12 months
• Support correspondence: Retained for up to 3 years

After the retention period, data is securely deleted or anonymised.

7. Your Rights

Under UK data protection law, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data (subject to legal retention requirements)
• Right to restrict processing: Request we limit how we use your data
• Right to data portability: Request your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at contact@hustle-app.co.uk. We will respond within one month.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Data Security

We take the security of your data seriously and implement appropriate technical and organisational measures, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing
• Regular security assessments and updates
• Access controls limiting who can access your data
• Secure cloud infrastructure with redundancy and backups

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Cookies

We use the following types of cookies:

Cookie Type	Purpose	Duration
Session cookie	Keeps you logged in during your session	Session
Authentication token	Remembers your login between sessions	30 days
Preferences	Stores your display preferences	1 year

We do not use advertising or tracking cookies. You can manage cookies through your browser settings, but disabling essential cookies may affect platform functionality.

10. Children's Privacy

Hustle. is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:

• Posting the updated policy on our website
• Sending you an email notification
• Displaying a notice within the platform

The "Last updated" date at the top of this policy indicates when it was last revised. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: