Legal
Privacy Policy
This Privacy Policy explains how Accel Books processes personal data when you visit our website, sign up for an account or use the Service.
Last updated: 16 May 2026 · Governing law: Republic of Ireland
1. Data controller
Accel Books Limited, a company incorporated in Ireland, is the data controller for personal data we collect about visitors, prospective customers and account administrators. Where we process personal data contained in Customer Data on behalf of a business customer, we act as processor and the customer is the controller(see our Data Processing Agreement).
Contact: privacy@accelbooks.io.
2. Personal data we collect
- Account data: name, email, password (hashed), role, organisation, phone.
- Billing data: billing address, VAT number, payment method tokens (we do not store full card numbers).
- Usage data: log files, device, browser, IP address, pages viewed, feature usage.
- Support data: messages, attachments and metadata you send to support.
- Marketing data: email preferences, campaign engagement.
- Customer Data: invoices, contacts, transactions, documents and other content you upload — processed on your behalf under the DPA.
3. How we use personal data (purposes and lawful bases)
| Purpose | Lawful basis (Art. 6 GDPR) |
|---|---|
| Providing and operating the Service | Performance of a contract |
| Billing, accounting, tax and audit records | Legal obligation |
| Security, fraud prevention and abuse monitoring | Legitimate interests |
| Product analytics and improvement | Legitimate interests |
| Marketing emails to existing customers about similar services | Legitimate interests (soft opt-in) |
| Marketing to prospects, non-essential cookies | Consent |
| Responding to lawful requests from authorities | Legal obligation |
4. Sharing and recipients
We share personal data only with:
- Subprocessors that help us run the Service — see subprocessors list.
- Payment providers (e.g. Stripe, GoCardless) to process payments.
- Professional advisers (auditors, lawyers) under confidentiality.
- Authorities where required by law.
- Acquirers in a merger, acquisition or sale of assets, subject to confidentiality.
We do not sell personal data.
5. International transfers
Personal data is primarily processed within the EU/EEA. Where transfers outside the EEA are necessary (for example, to a US-based subprocessor), we rely on the European Commission's Standard Contractual Clauses, the EU–US Data Privacy Framework where applicable, the UK International Data Transfer Addendum, and supplementary technical and organisational measures (encryption in transit and at rest, access controls, pseudonymisation).
6. Retention
We keep personal data only for as long as necessary for the purposes set out above and to comply with legal obligations. See our detailed retention schedule.
7. Your rights
Under GDPR and the Data Protection Act 2018 (Ireland) you have the right to:
- Access your personal data and receive a copy.
- Have inaccurate data rectified.
- Have data erased ("right to be forgotten") in defined circumstances.
- Restrict or object to processing, including direct marketing.
- Data portability for data you provided to us.
- Not be subject to solely automated decisions producing legal effects.
- Withdraw consent at any time (without affecting prior lawful processing).
- Lodge a complaint with the Irish Data Protection Commission (dataprotection.ie), the UK ICO (ico.org.uk) or your local supervisory authority.
Submit requests to privacy@accelbooks.io. We respond within one month.
8. Security
We implement appropriate technical and organisational measures including encryption in transit (TLS 1.2+) and at rest (AES-256), role-based access, MFA for administrative access, network isolation, logging, vulnerability management and continuous monitoring. See our Security page.
9. Cookies
See our Cookie Policy.
10. Children
The Service is not directed at children under 16 and we do not knowingly collect their data.
11. Changes
We will notify material changes by email or in-app at least 30 days before they take effect.