Privacy Policy
This Privacy Policy explains how personal information is collected, used, stored and protected when you use Sumbell.
1. About this Privacy Policy
This Privacy Policy explains how personal information is collected, used, stored and protected when you use Sumbell.
Sumbell is a digital product operated by:
NEXOBEN LTD
Company number: 17431879
Registered in England and Wales
Registered office:
128 City Road
London
EC1V 2NX
United Kingdom
For privacy questions or requests, contact:
NEXOBEN LTD is the controller of personal information processed through Sumbell unless stated otherwise.
By using Sumbell, you acknowledge that your personal information will be handled as described in this Privacy Policy.
2. What Sumbell Does
Sumbell helps individuals organise and understand their subscriptions, recurring expenses and upcoming payments.
Users manually enter the information they want to track.
Sumbell does not currently:
- connect to your bank account
- automatically discover subscriptions
- automatically import bank transactions
- cancel subscriptions with external providers on your behalf
- make payments on your behalf
- provide financial, accounting, tax or investment advice
3. Age Requirement
Sumbell is intended only for individuals who are at least 18 years old.
You must not create or use a Sumbell account if you are under 18.
We do not intentionally collect personal information from children.
If we become aware that an account belongs to someone under 18, we may close the account and delete the related personal information where appropriate.
4. Information We Collect
The information we collect depends on how you use Sumbell.
Account information
When you create an account, we may collect:
- your name
- your email address
- authentication information
- account verification status
- preferred currency
- account settings
- subscription plan
- billing status
Passwords are handled through our authentication infrastructure and are not stored by Sumbell in readable form.
Information you add to Sumbell
You choose what recurring commitments you want to track.
This may include:
- subscription names
- recurring expense names
- amounts
- currencies
- billing frequencies
- recurring intervals
- next payment dates
- categories
- active, paused or cancelled status
- optional notes
- other information you choose to enter
You are responsible for deciding what information you add to your account.
Please avoid entering sensitive information that Sumbell does not need.
For example, do not store full payment card numbers, passwords, authentication codes or other confidential credentials inside notes.
Billing information
If you purchase a paid Sumbell plan, payments are processed by an external payment processor.
We may receive information such as:
- payment status
- subscription status
- plan selected
- billing period
- transaction or customer reference
- renewal status
- cancellation status
Sumbell does not need to store your complete payment card details.
Payment information such as card numbers is normally handled directly by the payment processor.
Communications
If you contact us, we may keep:
- your email address
- your name
- the content of your message
- our response
- relevant support information
Technical and security information
When you use Sumbell, limited technical information may be processed to operate and protect the service.
This can include:
- IP address
- browser type
- device type
- operating system
- request timestamps
- authentication events
- error information
- security logs
- account activity needed to investigate misuse or technical problems
We do not currently use this information for advertising or behavioural profiling.
5. How We Use Your Information
We may use personal information to:
- create and manage your Sumbell account
- authenticate you when you sign in
- provide the Sumbell service
- store the recurring commitments you choose to track
- calculate monthly and yearly recurring totals
- calculate upcoming payments
- display statistics and account information
- manage your Sumbell subscription plan
- process account and billing events
- send account verification emails
- send password reset emails
- send security notices
- send important service communications
- send billing related communications
- send reminders you have chosen to receive
- respond to support requests
- investigate errors
- prevent fraud, abuse or unauthorised access
- maintain and improve the reliability of the service
- comply with legal obligations
- establish, exercise or defend legal rights
6. Lawful Bases for Processing
Depending on the purpose, we may rely on different lawful bases under applicable data protection law.
Contract
We process information when necessary to provide the Sumbell service you requested.
Examples include:
- creating your account
- signing you in
- storing your recurring items
- calculating your totals
- providing paid plan features
- managing your subscription
Legitimate interests
We may process limited information where reasonably necessary for legitimate business purposes, such as:
- protecting Sumbell from abuse
- improving reliability
- troubleshooting technical issues
- maintaining security
- responding to business or support enquiries
- protecting our legal rights
We consider whether these interests are proportionate and whether they affect your rights.
Legal obligation
We may process or retain information when required to comply with legal, tax, accounting, regulatory or court requirements.
Consent
Where a feature specifically requires your consent, we may rely on that consent.
You may withdraw consent where applicable.
For example, optional marketing communications would require a separate choice where required.
7. Email Communications
Sumbell may send emails necessary to operate your account.
These can include:
- email verification
- password reset messages
- security alerts
- important account notices
- billing and subscription information
- service related communications
- reminders you have chosen to receive
We do not send marketing emails merely because you created a Sumbell account.
If marketing emails are introduced in the future, users will be given an appropriate choice to opt in where required.
8. Cookies and Similar Technologies
Sumbell does not currently use advertising cookies, analytics cookies or behavioural tracking technologies.
The authenticated Sumbell application may use strictly necessary cookies or similar browser storage technologies to:
- keep you signed in
- maintain your secure session
- protect your account
- remember essential service state
- provide functionality you requested
These technologies are necessary for the application to work correctly.
More information is available in our Cookie Policy.
9. How We Share Information
We do not sell personal information.
We may share information with service providers that help us operate Sumbell.
These providers may include:
- cloud hosting providers
- authentication providers
- database infrastructure providers
- transactional email providers
- payment processors
- security and infrastructure providers
- professional advisers
- authorities where legally required
These providers may process information only where necessary to provide their services or comply with their own legal obligations.
We may also disclose information if reasonably necessary to:
- comply with applicable law
- respond to lawful requests
- enforce our Terms of Service
- investigate fraud or security incidents
- protect Sumbell, NEXOBEN LTD, our users or others
- establish or defend legal claims
If NEXOBEN LTD undergoes a merger, acquisition, investment, restructuring or sale, relevant information may be transferred as part of that transaction subject to applicable legal protections.
10. International Data Transfers
Sumbell is available to users worldwide.
Some infrastructure or service providers may process information outside the United Kingdom.
Where applicable data protection law requires safeguards for an international transfer, we will seek to use appropriate legal mechanisms.
These may include:
- recognised adequacy arrangements
- approved contractual safeguards
- other lawful transfer mechanisms
11. How Long We Keep Information
We keep personal information only for as long as reasonably necessary.
While your account remains active, we normally retain information needed to operate your Sumbell account.
If you delete your account, active account information will be scheduled for deletion.
Some backup copies may remain for up to 30 days before being removed through normal backup rotation.
Certain information may be retained for longer where required for:
- legal obligations
- tax or accounting requirements
- fraud prevention
- dispute resolution
- security investigations
- enforcing agreements
Where possible, information that no longer needs to identify you may be anonymised.
12. Account Deletion
You may request deletion of your Sumbell account.
Where account deletion is available through Settings, you may use that option directly.
You may also contact:
Account deletion is separate from cancelling a paid subscription.
Before deleting your account, make sure any paid Sumbell subscription has been cancelled where required.
Deleting an account does not automatically create a right to a refund.
Refund rights are explained in our Cancellation and Refund Policy.
13. Data Security
We use reasonable technical and organisational measures designed to protect personal information.
These measures may include:
- secure authentication
- access controls
- encrypted network connections
- database access controls
- separation of user data
- restricted administrative access
- security logging
- infrastructure protections
No online service can guarantee absolute security.
You are responsible for keeping your password and account credentials private.
If you believe your account has been compromised, contact us promptly.
14. Your Data Protection Rights
Depending on where you live and the applicable law, you may have rights relating to your personal information.
These may include the right to:
- access personal information we hold about you
- correct inaccurate information
- request deletion
- request restriction of certain processing
- object to certain processing
- receive certain information in a portable format
- withdraw consent where processing relies on consent
- complain to a data protection regulator
These rights may be subject to legal exceptions.
To make a request, contact:
We may need to verify your identity before completing certain requests.
15. UK Privacy Complaints
If you are located in the United Kingdom and are unhappy with how we handle personal information, please contact us first.
You may also have the right to complain to the Information Commissioner's Office, the UK data protection regulator.
16. Users Outside the United Kingdom
Sumbell is available internationally.
Depending on where you live, additional privacy rights may apply.
Nothing in this Privacy Policy is intended to remove rights that cannot lawfully be excluded under your local law.
17. Third Party Services
Sumbell may contain links to websites or services operated by other companies.
We do not control independent third party services.
Their privacy practices are governed by their own policies.
18. Changes to This Privacy Policy
We may update this Privacy Policy as Sumbell changes.
The latest version will be published on the Sumbell website with an updated date.
Where required by law, we may provide additional notice of material changes.
19. Contact
For privacy questions, account requests or general enquiries:
Sumbell
A product operated by NEXOBEN LTD
Company number: 17431879
Registered in England and Wales
128 City Road
London
EC1V 2NX
United Kingdom
Email: contact@sumbell.com