This notice explains how Conciergebysugar Ltd uses personal data when you use the Sugar website and services in the UK. Conciergebysugar Ltd (company number 16711762), of 41 Castlehaven Road, London, NW1 8RJ, is the controller of the personal data described here under the UK GDPR and Data Protection Act 2018.
This policy covers conciergebysugar.com, Sugar accounts, memberships, customer support, document and email connections, financial-concierge work, and related communications. It does not replace the privacy notices of providers whose websites or products you choose to use.
Sugar does not offer bank-account connections in the UK and will never ask for your online-banking password.
We receive data directly from you, from documents and email accounts you authorise us to read, from authentication and payment providers, from service providers that support Sugar, and from publicly available sources where needed to compare providers or validate information.
We do not sell personal data or use the contents of connected email or uploaded financial documents for third-party advertising.
Email access is read-only and limited to finding and processing relevant financial documents. Sugar cannot send, alter, or delete messages. Access to Google user data follows the Google API Services User Data Policy, including its Limited Use requirements. You can disconnect an email provider in Sugar or revoke its access through the provider.
We use connected-email data only to provide or improve the user-facing Sugar features you request, protect those features, and comply with law. We do not transfer this data to advertising platforms, data brokers, or humans for general inbox surveillance.
Sugar may use automated systems and AI providers to classify documents, extract fields, compare options, draft summaries, and prioritise work. Outputs can be wrong and are subject to appropriate checks. Sugar does not make a decision based solely on automated processing that produces legal or similarly significant effects for you. You may ask for human review or challenge an output by contacting us.
We share only what is reasonably needed with:
Service providers may act as processors under our instructions or as separate controllers where they determine their own purposes, such as a payment provider meeting its legal obligations.
Some providers process data outside the United Kingdom. Where UK data protection law requires a safeguard, we rely on an adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another lawful mechanism, together with appropriate technical and contractual protections. You may ask us for more information about the safeguard used for a relevant transfer.
We retain personal data only for as long as reasonably needed for the purpose collected, including providing your account and membership, resolving complaints, enforcing agreements, preventing fraud, and meeting tax, accounting, and legal duties. Retention periods vary by record. When data is no longer needed, we delete or anonymise it unless law requires continued retention.
We use access controls, encryption in transit and at rest where appropriate, logging, restricted staff access, and supplier controls. No online system is risk-free. If a personal-data breach is likely to create a risk to people, we will notify the Information Commissioner's Office and affected people when the law requires it.
Depending on the circumstances, you may have the right to:
These rights can have legal exceptions. Email support@conciergebysugar.com to make a request. We may need to verify your identity and normally respond within one month.
You may also complain to the Information Commissioner's Office (ICO). We would appreciate the chance to address your concern first.
Sugar uses essential storage for security, sign-in, checkout, and preferences. We may use analytics to understand how the public website and service are used. Where UK law requires consent for non-essential cookies or similar technology, we will request it before use. Browser controls can also restrict cookies, although essential features may stop working.
Sugar is for adults aged 18 and over. We do not knowingly collect data from children. Contact us if you believe a child has provided data so we can investigate and delete it where appropriate.
We may update this policy when the service, law, or our providers change. We will post the new version here and use reasonable means to notify account holders of material changes.
Email: support@conciergebysugar.com
Conciergebysugar Ltd, 41 Castlehaven Road, London, NW1 8RJ