Privacy Policy
Last updated: April 2026
This policy explains what personal data BudgetCast collects, why we collect it, how we use it, and what your rights are. We've written it in plain English — if anything is unclear, please contact us.
Who we are
BudgetCast is operated by [PLACEHOLDER: Your name / trading name],
registered at [PLACEHOLDER: Address].
ICO registration: [PLACEHOLDER: ZxxxxxxX — or "Registration pending" if not yet registered]
Privacy contact: [PLACEHOLDER: privacy@budgetcast.co.uk]
We are the data controller for the personal data described in this policy.
What data we collect and why
| Data | Why we collect it | Legal basis |
|---|---|---|
| Name, email address, password (hashed) | To create and secure your account | Contract performance |
| Date of birth, gender, postcode, country | To personalise your experience (locale, currency defaults) | Contract performance |
| Budget and financial planning data (budgets, items, schedules, categories, tags) | To provide the core budgeting service | Contract performance |
| IP address, browser / device type | Security, fraud prevention, and audit trail | Legitimate interests |
| Change history (what changed, when, by whom) | Audit trail — so nothing disappears silently | Legitimate interests |
We do not collect payment card data. We do not sell your data to third parties. We do not use your financial data for advertising.
Shareable snapshots
BudgetCast includes a feature that lets you generate a read-only link to your budget — for example, to share with a debt adviser, IFA, mortgage broker, or family member. You control when these links are created and can revoke them at any time. We do not share your budget data with any third party without your explicit action.
Open Banking (future feature)
When the Open Banking integration is available, connecting a bank account will be opt-in and can be revoked at any time from your account settings. We will update this policy before that feature launches.
How long we keep your data
When you delete a budget item or budget, it is kept for 60 days before being permanently removed — so you can recover accidental deletions. After 60 days it is gone permanently.
When you delete your account, all your personal data, budgets, and history are permanently and irreversibly deleted. This satisfies your right to erasure under UK GDPR. Anonymised aggregate data (e.g. system usage statistics with no link to you) may be retained.
Your rights under UK GDPR
You have the right to:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — request deletion of your data (account deletion handles this in full)
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at [PLACEHOLDER: privacy@budgetcast.co.uk]. We will respond within 30 days. If you are not satisfied with our response, you can complain to the ICO.
Cookies
BudgetCast uses a single session cookie to keep you signed in. We do not use advertising cookies, analytics cookies, or any third-party tracking. No cookie consent banner is required.
Security
Passwords are hashed using industry-standard algorithms and never stored in plain text. All connections use HTTPS. We review security practices regularly.
Changes to this policy
We will update this page when anything material changes and update the "last updated" date above. For significant changes we will notify you by email.
Contact
For any privacy questions or requests:
[PLACEHOLDER: privacy@budgetcast.co.uk]
[PLACEHOLDER: Your name / trading name, Address]
This policy applies to the BudgetCast service at budgetcast.co.uk and uat.budgetcast.co.uk.