Nomates Rates does not sell personal information. Core quote, invoice and customer records are primarily stored on your device unless a feature expressly says that it uses cloud storage or synchronisation. Account, subscription and payment-status information may be processed on our systems and by the providers described below.
1. Who we are
Nomates Rates is operated by IQ Learning Group Ltd, a company registered in England and Wales under company number 15232837. Our registered office is 120 Priory Street, Carmarthen, Wales, SA31 1NB. For UK data protection law, IQ Learning Group Ltd is the controller of personal information we collect about app users, website visitors and support contacts.
This policy applies to the Nomates Rates website, mobile applications and related support, AI-assistance, subscription and payment-enablement services. It should be read with our Terms of Use and Refund & Payments Policy.
2. The roles of Nomates Rates, business users and Stripe
When a business user enters a customer's personal information into a quote, invoice or customer record, that business user normally decides why and how the information is used and is therefore the controller of that customer information. The business user must give its customers any required privacy information and have a lawful basis for using their details.
Where customer records remain only on the user's device, we cannot view or retrieve them. Where a Nomates Rates feature processes customer information on our systems, we process it only to provide that feature and, where applicable, act as the business user's processor. Stripe separately processes connected-account, payer and transaction information under Stripe's own legal terms and privacy policy.
3. Information we collect
3.1. Account and business profile information
- Name, email address, login and verification information.
- Business name, trading address, contact details, logo, VAT or tax settings and document preferences.
- Plan, 14-day trial and paid-subscription entitlement, eligibility and status, trial start and end time, renewal or cancellation status, and app-store receipt or transaction identifiers. We do not receive full payment-card details used to activate or buy an App Store or Google Play subscription.
3.2. Quotes, invoices and customer records
- Customer names, addresses and contact details.
- Descriptions of goods, services and jobs; notes; itemised prices; discounts; VAT or tax; totals; document numbers; dates; and quote or invoice status.
- The content of PDFs and messages you choose to generate or share. WhatsApp, SMS and email delivery is handled by the service you select and remains subject to that provider's terms.
3.3. Voice input
If you use dictation, audio may be sent to Apple, Google or another speech-recognition provider to turn speech into text. When you use AI-assisted line-item creation, the transcript and relevant quote or invoice context may also be sent to an AI service provider to structure proposed titles, descriptions, quantities, prices or other item information. Nomates Rates does not intentionally retain the raw audio recording unless a feature clearly states otherwise. The transcript and generated text become part of the record in which you place them. Device, speech-recognition and AI providers may process information under their own privacy terms.
3.4. Pro and Stripe-connected payment information
- Stripe connected-account identifier, onboarding status, requested capabilities, verification or restriction status and whether charges and payouts are enabled.
- Payment, refund, dispute, payout and balance metadata needed to display or operate payment features, which may include amount, currency, status, dates, customer details and limited card information such as brand and last four digits.
- Device and location information where required to enable Stripe Terminal or Tap to Pay, confirm service availability, meet payment-network or regulatory requirements and prevent fraud.
Full card numbers, contactless credentials and PINs are handled by Stripe, the device platform and payment networks. They are not made available to Nomates Rates in readable form.
Expiry or cancellation of the Pro trial or subscription does not by itself delete or disconnect a Stripe connected account. Stripe may continue to hold connected-account, verification, payment, balance, payout, refund, dispute and account-setting information so the user can manage existing money and obligations through the Stripe Express Dashboard.
3.5. Technical, support and website information
- Device type, operating system, app version, language, IP address, timestamps, diagnostic logs, crash reports, security events and feature usage.
- Messages, screenshots and other information you send when requesting support or reporting a problem.
- Website cookie choices, analytics information and marketing preferences. We ask for consent before using non-essential cookies where required by law.
4. How and why we use information
Provide the account, Free features and Pro features
- Typical information
- Account, business profile, documents, settings and entitlement
- UK GDPR basis
- Contract
Enable Stripe onboarding and payments
- Typical information
- Connected-account, transaction, payout and device information
- UK GDPR basis
- Contract; legal obligation; legitimate interests
Secure, troubleshoot and improve the service
- Typical information
- Logs, diagnostics, fraud and support information
- UK GDPR basis
- Legitimate interests; legal obligation
Administer trials, subscriptions, billing and records
- Typical information
- Plan, trial and subscription status, store receipts, billing and correspondence
- UK GDPR basis
- Contract; legal obligation
Send optional product news or marketing
- Typical information
- Contact details and preferences
- UK GDPR basis
- Consent, or legitimate interests where legally permitted
Establish or defend legal claims
- Typical information
- Relevant account, transaction, support and security records
- UK GDPR basis
- Legitimate interests; legal obligation
5. Where information is stored
Core quotes, invoices and customer records are primarily stored locally on the device unless the relevant screen clearly states that cloud backup, synchronisation or another online service is being used. Users should maintain appropriate device backups and export important business records.
Account, security, support, trial and paid-subscription entitlement, and limited payment-event information may be stored on systems used to operate Nomates Rates. Stripe stores and processes connected-account and transaction information. Apple and Google store and process trial, subscription, billing and marketplace-entitlement information.
7. International transfers
Some providers may process information outside the United Kingdom. Where UK data protection law requires it, we use an adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another lawful safeguard. Stripe, Apple and Google describe their transfer arrangements in their own privacy materials.
8. How long we keep information
- Account and business-profile information: while the account is active and normally for up to six years afterwards where needed for contracts, accounting, disputes or legal claims.
- Support correspondence: normally for up to two years after the issue closes, unless longer retention is reasonably necessary.
- Security and diagnostic logs: only for as long as reasonably required for security, troubleshooting and service improvement, normally no longer than 12 months unless an incident requires longer retention.
- Marketing information: until consent is withdrawn or you opt out; a minimal suppression record may be kept to respect that choice.
- Device-only documents: until you delete them, delete the app or erase the device. Deleting the app may permanently remove locally stored records.
Stripe, Apple, Google and other independent providers apply their own retention periods, including periods required for subscription records, financial services, anti-money-laundering, tax, disputes and fraud prevention. Ending a Nomates Rates trial or Pro subscription does not automatically erase information those providers must or are permitted to retain.
9. Security
We use reasonable technical and organisational measures designed to protect information, including access controls, encrypted transmission where appropriate, restricted administrative access and security monitoring. No electronic service is completely secure. Users must protect their devices, email accounts, app credentials and Stripe access, install updates and promptly report suspected unauthorised access.
10. Your rights
Subject to UK data protection law, you may have rights to be informed; access your personal information; correct inaccurate information; erase information; restrict or object to processing; receive certain information in a portable format; and withdraw consent without affecting earlier lawful processing. You may also complain to the Information Commissioner's Office (ICO).
For information held only on your device, use the app and device controls to view, export, edit or delete it. If your request concerns details placed in Nomates Rates by a tradesperson or other business, contact that business first because it is normally the controller. We will assist it where legally required.
ICO information and complaints: ico.org.uk.
11. Children
Nomates Rates is a business service intended for people aged 18 or over. We do not knowingly offer accounts to children or intentionally collect children's personal information for our own purposes.
12. Cookies and similar technology
Our website may use strictly necessary cookies to operate and protect the site. Analytics, advertising or other non-essential technologies will be used only where permitted and, where required, after consent through the cookie controls. You can change your choice through the available cookie settings or browser controls.
13. Changes to this policy
We may update this policy to reflect changes in the app, providers, law or business operations. We will publish the revised policy with a new effective date and give additional notice where a change materially affects users or where law requires it.
14. Contact us
Privacy enquiries: hello@nomatesrates.com
Controller: IQ Learning Group Ltd, company no. 15232837
Registered office: 120 Priory Street, Carmarthen, Wales, SA31 1NB
Website: nomatesrates.com
15. Useful external links
These third-party pages may be updated from time to time. The version in force when you use the relevant third-party service applies.