Privacy notice
Last updated 13 October 2026
This notice explains what personal information Driksoett Ltd holds, why it is held, and what you can ask for. It is written in plain English on purpose. If anything here is unclear, email Joshua.Leverett@driksoett.com and ask.
Who is responsible for your information
Driksoett Ltd is an incorporated company. Where Driksoett Ltd decides why and how personal information is used — enquiries, its own client records, and its own business records — Driksoett Ltd is the data controller.
You can reach the controller at Joshua.Leverett@driksoett.com.
When Driksoett is not the controller
When Driksoett Ltd carries out finance or administration work for a client, the personal information inside that client’s records — their own customers, suppliers and staff — normally remains the client’s responsibility. Driksoett Ltd handles it on that client’s instructions, under the terms agreed with them.
This notice covers the information Driksoett Ltd is responsible for in its own right. If you are a customer or supplier of a Driksoett Ltd client and you want to know how your information is used, that client is the right place to ask, and Driksoett Ltd will help them answer.
What information is held
- Enquiry and contact information
- Your name, business name, email address, any phone number you choose to give, and whatever you tell Joshua Leverett about your business when you get in touch.
- Prospective client information
- Notes from a free review: how the finance and administration function currently works, which software is in use, where the process is breaking down and roughly what the workload looks like.
- Client and business contact information
- The names, roles and contact details of the people Driksoett Ltd deals with at a client business, and the correspondence between you.
- Finance and client-service information
- Where Driksoett Ltd is engaged to do the work: invoices, receipts, bank and card transaction records, supplier and customer records, mileage and expense records, and the correspondence about them. These often contain personal information about people other than you.
- Cura account information
- If you use Cura, the client workspace Driksoett Ltd operates: the sign-in details needed to give you access, and the records you and Driksoett Ltd put into it.
Driksoett Ltd does not ask for special category information — health, biometric or similar — and asks that it is not sent. Driksoett Ltd does not provide payroll.
What this website itself collects
The Driksoett Ltd marketing pages have no contact form, newsletter or embedded account sign-up form. They run no advertising code. They run analytics only if you accept it, and chat only if you start one — see “Analytics and chat on this website” below. The “book a free review” buttons currently open an email to Joshua Leverett, so nothing is submitted to this site.
If those buttons are later pointed at an online booking page, that booking provider’s own privacy information will apply to what you enter there, and this notice will be updated to say so.
These pages are part of the same application as Cura, so every page loads Cura’s sign-in code from Clerk, the provider that handles signing in. Your browser requests that code from Clerk whether or not you ever sign in, and Clerk receives your IP address and browser information as a result. This request to Clerk is part of Cura’s authentication infrastructure rather than Driksoett Ltd’s advertising or website analytics.
Driksoett Ltd sets no advertising cookies on these pages, and no analytics cookies unless you accept them. Signing in to Cura sets cookies that are strictly necessary for your session to work.
These pages are hosted by Vercel. As with any website, the hosting service processes technical information such as your IP address in order to serve the page and keep the service secure.
Why it is used, and the lawful basis
- Replying to your enquiry and holding a free review
- Legitimate interests — responding to somebody who has asked about the service — and, where you are considering engaging Driksoett Ltd, steps taken at your request before entering a contract.
- Doing the finance and administration work agreed with you
- Performance of the contract between us.
- Keeping Cura working, available and secure
- Performance of the contract, and legitimate interests in keeping the service secure and functioning.
- Keeping Driksoett’s own business and tax records
- Legal obligation, and legitimate interests in running the business properly and being able to answer questions about past work.
- Website analytics, and chat
- Consent, which you can withdraw at any time from Cookie settings.
Where legitimate interests are relied on, the interest is running a small professional practice and answering the people who contact it. That is balanced against your rights, and you can object — see below.
Who else may see it
Personal information is not sold, and it is not shared for anyone else’s marketing.
- Cura’s service providers
- Cura uses Clerk to handle sign-in and Supabase to store data. They process that information on Driksoett Ltd’s instructions so that Cura works.
- Mapped mileage in Cura
- When you use mapped mileage, the places you search for and the stops you choose are sent to Geoapify, which finds them and calculates the route on Driksoett Ltd’s instructions. Your browser loads the map images from OpenStreetMap’s tile service, which receives your IP address and browser details when it does.
- Website analytics and chat
- Vercel and HubSpot, as described under “Analytics and chat on this website”, and only with your consent.
- Software you already use
- Where Driksoett Ltd works inside a client’s own software — for example a Xero, Stripe or GoCardless account belonging to the client — the client controls that account and their own agreement with that provider applies to it.
- Correspondence passes through the email service Driksoett Ltd uses to send and receive mail.
- Where the law requires it
- Information may be disclosed where Driksoett Ltd is legally obliged to do so, or to take or defend legal claims.
How long it is kept
Information is kept only while there is a reason to keep it, and the reason decides the period rather than a fixed rule applied to everything.
- Enquiries that do not become work
- Kept while the conversation is live and for a reasonable follow-up afterwards, then deleted.
- Client records
- Kept for as long as Driksoett Ltd works with the client, and afterwards for as long as tax, accounting and legal requirements make necessary.
- Records held for a client
- Returned, retained or deleted as agreed with that client.
Your rights
Under UK data protection law you can ask Driksoett Ltd to:
- Give you a copy
- Confirm what is held about you and provide a copy of it.
- Correct it
- Put right anything inaccurate, and complete anything incomplete.
- Delete it
- Erase information where there is no longer a good reason to keep it.
- Restrict or object
- Pause the use of information while a concern is resolved, or object to use that relies on legitimate interests.
- Move it
- Receive information you provided in a portable form, where that right applies.
- Withdraw consent
- Withdraw it at any time, where consent is what the use relies on. That does not affect anything done beforehand.
To exercise any of these, email Joshua.Leverett@driksoett.com. There is no charge in ordinary cases. Where the information is held on a client’s behalf, the request is normally one for that client to answer, and Driksoett Ltd will help them do so.
Complaints
If you are unhappy with how your information has been handled, please raise it with Joshua Leverett first at Joshua.Leverett@driksoett.com — most things are quicker to fix directly.
You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk/make-a-complaint. You do not have to contact Driksoett Ltd first.
Changes to this notice
If this notice changes, the updated version is published on this page and the date at the top is changed with it.