GDPR Compliance Statement
Last Updated: 07 April 2025
At Fast Ledger, we take data privacy seriously. As a trusted accounting software provider to solicitors, we are fully committed to complying with the General Data Protection Regulation (GDPR) and all applicable UK and EU data protection laws.
This page outlines how we handle, protect, and give you control over your personal data.
What is GDPR?
The General Data Protection Regulation (GDPR) is a regulation enacted by the European Union to enhance individuals’ control over their personal data. It applies to any organization that processes personal data of EU/UK residents — including us.
Who Does This Apply To?
Our GDPR policy applies to:
- All Fast Ledger users, including solicitors, legal staff, and clients whose data is managed via the platform
- Visitors to our website
- Anyone whose personal information we process or store
Our Role as a Data Processor & Controller
- As a Data Processor – We process data on behalf of solicitors and legal firms who use Fast Ledger to manage their client accounts and finances.
- As a Data Controller – We collect and manage user data for account setup, billing, customer support, and marketing (where consented).
What Personal Data We Collect
We only collect data that is necessary for the functionality of the software and to serve you better, including:
- Name and contact details (email, phone number)
- Company and billing information
- Login credentials
- IP address and device information
- Client data inputted into the system (when applicable)
How We Use Your Data
We use your personal data for the following purposes:
- To provide and maintain the Fast Ledger software
- To manage your account and billing
- To offer customer support
- To send service-related updates and communications
- To improve our software and user experience
- For legal and regulatory compliance
We do not sell or share your personal data with third parties for marketing purposes.
Lawful Basis for Processing
Under GDPR, we rely on the following lawful bases:
- Performance of a Contract – to provide the software and services you’ve requested
- Legal Obligation – to comply with financial, regulatory, and tax laws
- Legitimate Interests – to improve services, prevent fraud, and secure our systems
- Consent – for email marketing or data not necessary for service delivery (you can withdraw consent at any time)
Data Security
We implement strong technical and organizational measures to keep your data safe, including:
- End-to-end encryption of sensitive data
- Secure data storage and regular backups
- Role-based access control
- Monitoring and intrusion detection systems
- Staff training on data protection and privacy
Data Retention
We retain personal data only as long as necessary for:
- Providing the service
- Fulfilling legal or tax obligations
- Handling disputes or enforcement of agreements
Upon termination or request, data can be deleted or returned to you, subject to legal retention requirements.
Your GDPR Rights
As a data subject, you have the right to:
- Access – Request a copy of your personal data
- Rectify – Correct inaccurate or incomplete information
- Erase – Request deletion of your data (right to be forgotten)
- Restrict – Limit processing in certain situations
- Object – Oppose processing based on legitimate interest or direct marketing
- Portability – Receive your data in a structured, machine-readable format
To exercise any of these rights, please contact us at:
📧 Email: [Insert DPO or support email]
🕐 We aim to respond within 30 days of your request.
International Data Transfers
If we transfer data outside the UK or EU, we ensure adequate protection is in place, such as Standard Contractual Clauses (SCCs) or working with partners in jurisdictions with equivalent data protection laws.
Third-Party Processors
We may use trusted third-party service providers (e.g., for cloud hosting, support, analytics) under strict data processing agreements that ensure GDPR compliance.
Contact Us
If you have questions or concerns regarding your data or our GDPR practices, you can contact:
Data Protection Officer (DPO)
📧 Email: office@fastledger.co.uk
📍 Address: Business Village, Unit 30,The, Wexham Rd, Slough SL2 5HF, United Kingdom
You also have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK or relevant EU supervisory authority).
Ongoing Compliance
We continuously monitor our data practices, review contracts, and train our staff to stay aligned with GDPR requirements.
Thank you for trusting Fast Ledger.
Your privacy is not just a legal obligation — it’s a core part of how we operate.