Data Processing Agreement
Last Updated: 17 July 2026
1. Purpose and scope
1.1 Incorporation
This data processing agreement (DPA) forms part of the agreement between you and The Float Yard Ltd, a company registered in Scotland under company number SC386627), and with its registered office at 5 South Charlotte Street, Edinburgh EH2 4AN. (Float, we, us or our) for your use of the Float cash flow forecasting service (the Service) under our Terms and Conditions.
1.2 Application
This DPA applies where, in providing the Service, we process personal data on your behalf as processor.
1.3 Purpose
This DPA sets out the parties' rights and obligations in relation to that processing and is intended to satisfy the requirements of Article 28 of the UK GDPR (as hereinafter defined).
1.4 Commencement
This DPA takes effect on the earlier of:
- the date you first access or use the Service;
- the date your subscription begins; or
- the date you accept the Terms.
1.5 Order of precedence
If there is any inconsistency between this DPA and the Terms and Conditions in relation to the processing of personal data, this DPA shall prevail to the extent of that inconsistency.
1.6 Controller processing excluded
This DPA applies only where we process personal data as your processor. It does not apply where we process personal data as controller in our own right, including for account administration, billing, payment processing, customer support, marketing or compliance with legal obligations. Those activities are governed by our Privacy and Cookie Policy.
2. Definitions
2.1 Controller, processor, data subject, personal data, personal data breach, processing and sub-processor
In this DPA, the following terms have the following meanings:
Definition | Meaning |
controller, processor, data subject, personal data, personal data breach, processing and sub-processor | have the meanings given in the Data Protection Legislation. |
Customer Personal Data | the personal data we process on your behalf in connection with the Service. |
Data Protection Legislation | all applicable data protection and privacy legislation in force from time to time in the UK including without limitation the EU law retained version of the General Data Protection Regulation ((EU) 2016/679) (UK GDPR); the Data Protection Act 2018 (and regulations made thereunder); and the Privacy and Electronic Communications Regulations 2003 (SI 2003/2426) as amended. |
2.2 Customer Personal Data
Capitalised terms used but not defined in this DPA have the meaning given in the Terms and Conditions.
2.3 Data Protection Legislation
All applicable data protection and privacy legislation in force from time to time in the UK including without limitation the EU law retained version of the General Data Protection Regulation ((EU) 2016/679) (UK GDPR); the Data Protection Act 2018 (and regulations made thereunder); and the Privacy and Electronic Communications Regulations 2003 (SI 2003/2426) as amended.
2.4 Capitalised terms
Capitalised terms used but not defined in this DPA have the meaning given in the Terms and Conditions.
3. Roles of the parties
3.1 Controller and processor
In relation to the Customer Personal Data:
- you are the controller; and
- we are the processor.
3.2 Details of processing
The scope, nature, purpose and duration of the processing, together with the categories of personal data and data subjects, are set out in Annex A.
3.3 Your responsibilities
As controller, you are responsible for:
- determining the purposes and lawful basis for the processing;
- complying with your obligations under the Applicable Data Protection Laws;
- providing any privacy notices required by law; and
- obtaining any consents or other permissions required for the processing.
3.4 Our controller processing
Nothing in this DPA prevents us from processing personal data as controller where we do so for our own purposes, including those described in our Privacy and Cookie Policy.
4. Processing instructions
4.1 Processing on your instructions
We will process Customer Personal Data only:
- on your documented instructions;
- as necessary to provide the Service in accordance with our Terms and Conditions and this DPA;
- where required by Data Protection Legislation; or
- as otherwise agreed in writing between us.
4.2 Documented instructions
Your use of the Service, including the way you configure it, the personal data you upload or connect to it, and the features you choose to use, constitutes your documented instructions for the purposes of this DPA.
4.3 Legally required processing
If we are required by Data Protection Legislation to process Customer Personal Data other than in accordance with your instructions, we will notify you before doing so unless we're prohibited by law from giving that notice.
4.4 Infringing instructions
If we reasonably believe that one of your instructions infringes the Data Protection Legislation, we'll notify you without undue delay. Unless required by law, we will not be obliged to comply with that instruction until the issue has been resolved.
5. Processor obligations
5.1 Our obligations
We will
- ensure that persons authorised to process Customer Personal Data are subject to a duty of confidentiality or an appropriate statutory obligation of confidentiality;
- implement and maintain the technical and organisational measures described in clause 7 and Annex C;
- comply with clause 6 when appointing sub-processors;
- taking into account the nature of the processing and the information available to us, provide reasonable assistance to help you comply with your obligations under the Data Protection Legislation, including in relation to:
- data subject requests;
- personal data breaches;
- data protection impact assessments; and
- prior consultation with a supervisory authority;
- make available to you all information reasonably necessary to demonstrate our compliance with this DPA and Article 28 of the UK GDPR; and
- permit audits in accordance with clause 10.
6. Sub-processors
6.1 General authorisation
You give us general authorisation to appoint sub-processors to process Customer Personal Data on our behalf for the purposes of providing the Service.
6.2 Flow-down obligations
We will ensure that every sub-processor is subject to written contractual obligations that provide a level of protection for Customer Personal Data that is no less protective than those set out in this DPA.
6.3 Our responsibility
We remain fully responsible for the performance of our sub-processors and for their compliance with the obligations applicable to us under this DPA.
6.4 Changes to sub-processors
A current list of our sub-processors is set out in Annex B. We will give reasonable prior notice of any intended change to our sub-processors, including by updating Annex B or notifying account administrators.
6.5 Objections
If you have a reasonable objection to a proposed sub-processor on data protection grounds, you must notify us promptly. We'll work with you in good faith to address your concerns. If we can't reasonably resolve them, either party may terminate the affected part of the Service by giving written notice.
7. Security
7.1 Security measures
We will implement and maintain appropriate technical and organisational measures to protect Customer Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Customer Personal Data, as required by Data Protection Legislation.
7.2 Updates to measures
Our current technical and organisational measures are described in Annex C. We may update those measures from time to time, provided that the overall level of security is not materially reduced.
7.3 Specific measures
Our current technical and organisational measures are described in Annex C. We may update those measures from time to time, provided that the overall level of security is not materially reduced.
- encryption of Customer Personal Data in transit and at rest;
- logical access controls restricting access to authorised personnel on a need-to-know basis;
- password protection and authentication measures;
- processes to ensure the ongoing confidentiality, integrity, availability and resilience of our systems and services;
- procedures for regularly testing, assessing and evaluating the effectiveness of our security measures; and
- appropriate backup and disaster recovery procedures.
7.4 Hosting and infrastructure
Details of our hosting providers and infrastructure are set out in Annexes B and C.
7.5 Further information
Further information about our technical and organisational measures, in addition to those detailed in Annex C, can be found at https://floatapp.com/security
8. Personal data breaches
8.1 Breach notification
We will notify you without undue delay after becoming aware of a personal data breach affecting Customer Personal Data.
8.2 Contents of notification
Our notification will, to the extent the information is available, include:
- a description of the nature of the personal data breach;
- the categories and approximate number of data subjects and personal data records affected;
- the likely consequences of the personal data breach; and
- the measures taken or proposed to address the personal data breach and mitigate its possible adverse effects.
8.3 Further information and cooperation
We will provide further information as it becomes available and reasonably cooperate with you in investigating the personal data breach and complying with your obligations under the Data Protection Legislation.
8.4 No third-party notification
Unless required by law, we'll not notify any supervisory authority, affected data subject or other third party of a personal data breach relating to Customer Personal Data without first consulting you.
9. Data subject requests and compliance assistance
9.1 Your responsibility
As a controller, you are responsible for responding to requests from data subjects exercising their rights under Data Protection Legislation.
9.2 Our assistance
Taking into account the nature of the processing and the information available to us, we will provide reasonable assistance to help you comply with your obligations under the Data Protection Legislation, including in relation to data subject requests, personal data breaches, data protection impact assessments and prior consultation with a supervisory authority.
9.3 Assistance through the Service
Where reasonably possible, we will provide that assistance through the functionality of the Service, including enabling you to access, rectify, export (via CSV or API) and delete Customer Personal Data.
9.4 Requests received by us
If we receive a request directly from a data subject relating to the Customer Personal Data, we will promptly notify you and won't respond to the request except:
- on your written instructions; or
- where we are required to do so by law.
10. Audits
10.1 Information on request
We will make available to you all information reasonably necessary to demonstrate our compliance with this DPA and Article 28 UK GDPR.
10.2 Compliance documentation
We may satisfy requests under clause 10.1 by providing existing audit reports, certifications, summaries of our security measures or other compliance documentation.
10.3 Further audits
If the information provided under clause 10.2 is insufficient to demonstrate our compliance, you may request a further audit on reasonable written notice and no more than once per year, provided that:
- the audit relates only to our processing of Customer Personal Data;
- it takes place during normal business hours;
- it does not unreasonably interfere with our business; and
- it complies with our reasonable confidentiality and security requirements.
10.4 Audit costs
Each party will bear their own costs of any audit unless the audit identifies a material breach of this DPA by us.
11. International data transfers
11.1 Transfers permitted
We may transfer Customer Personal Data outside the United Kingdom or the European Economic Area where necessary to provide the Service.
11.2 Transfer safeguards
We will not transfer Customer Personal Data outside the United Kingdom or the European Economic Area (EEA) other than to the sub-processors identified in Annex B, or any replacement sub-processors appointed in accordance with clause 6, unless:
- the transfer is subject to an appropriate safeguard recognised under the Data Protection Legislation, including an adequacy regulation, the EU Standard Contractual Clauses, the UK International Data Transfer Addendum or another lawful transfer mechanism;
- data subjects benefit from enforceable rights and effective legal remedies, where required by the Data Protection Legislation;
- we comply with our obligations under the Data Protection Legislation in relation to the transfer and ensure that Customer Personal Data continues to receive an appropriate level of protection; and
- we continue to process Customer Personal Data in accordance with your documented instructions and this DPA.
12. Term and termination
12.1 Duration
This DPA remains in effect for as long as we process Customer Personal Data on your behalf.
12.2 Return or deletion
On termination or expiry of the Service, we will, at your written request, return Customer Personal Data to you or securely delete it, unless we are required by law to retain it. If you do not request the return of Customer Personal Data before the end of the retention period referred to in clause 12.3, we will securely delete it.
12.3 Deletion timeframe
Unless otherwise agreed in writing, Customer Personal Data will ordinarily be deleted within 90 days after termination of the Service.
12.4 Legally required retention
Where we are required by law to retain Customer Personal Data after termination, we will continue to protect it in accordance with this DPA until it is deleted.
13. Notices
13.1 Form of notice
Any notice given under or in connection with this DPA must be in writing and sent by email.
13.2 Addresses for notices
We will send notices to the email address associated with your account, and you may send notices to us at dpo@floatapp.com, or to any replacement email address we notify to you from time to time.
13.3 Deemed receipt
A notice sent by email will be deemed received when it is capable of being accessed by the recipient, unless the sender receives an automated message indicating that delivery has failed.
13.4 Legal proceedings
This clause does not apply to the service of any documents in legal proceedings or other formal dispute resolution proceedings, which may not be served by email unless permitted by applicable law or the applicable rules of procedure.
Annexes
Annex A — Processing Activities
Item | Detail |
Scope | Processing of Customer Personal Data contained within your Float Account and imported from connected accounting platforms for the purpose of providing the Service. |
Nature | Collection, recording, organisation, structuring, storage, hosting, retrieval, consultation, use, transmission, synchronisation with supported accounting platforms, analysis, reporting, export, disclosure (where authorised by you), restriction, deletion and destruction of Customer Personal Data. |
Purpose | To provide, maintain, secure and support the Service, including cash flow forecasting, scenario planning, budgeting, financial reporting, synchronisation with supported accounting platforms, customer support, troubleshooting, security monitoring and the fulfilment of our obligations under the Terms and Conditions and this DPA. |
Duration | For the duration of your subscription to the Service and thereafter in accordance with clause 13 of this DPA |
Types of personal data | Depending on the data you choose to upload or synchronise with the Service, Customer Personal Data may include:
|
Categories of data subjects | Data subjects may include:
|
Annex B — Sub-Processors
Sub-processor | Purpose | Personal Data processed | Location |
Heroku | Cloud hosting and infrastructure | All categories (see Annex A) | United States |
Amazon Web Services (AWS) | Cloud hosting and storage | All categories (see Annex A) | UK / EEA |
Google Cloud Platform (GCP) | Cloud hosting and storage | All categories (see Annex A) | UK / EEA / United States |
Intercom | Customer support and in-app messaging | Name, email | United States |
Stripe | Payment and subscription processing | Name, email, transaction data | United States / Ireland |
ChartMogul | Subscription analytics and CRM | Name, email | EEA |
MixPanel | Website and Application Analytics | Customer IDs, usage data | EEA / United States |
Google Analytics | Website and Application Analytics | Customer IDs, usage data | EEA / United States |
We will keep this list current and provide reasonable prior notice of changes, as described in clause 6.4.
Annex C — Technical and organisational measures
Float implements and maintains appropriate technical and organisational measures designed to protect Customer Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Customer Personal Data, taking into account the nature, scope, context and purposes of the processing and the risks to the rights and freedoms of natural persons.
The measures include, where appropriate:
Category | Measures |
Information security governance | Information security policies and procedures are maintained and reviewed periodically. Responsibility for information security is allocated within the organisation. |
Access controls | Access to Customer Personal Data is restricted to authorised personnel on a need-to-know basis. User access is managed through authentication controls and is reviewed as appropriate. |
Authentication | User accounts are protected by password-based authentication. Passwords are stored using industry-standard hashing techniques and are not stored in plain text. |
Encryption | Customer Personal Data is protected by encryption in transit and at rest using industry-standard encryption technologies. |
Confidentiality | Personnel with access to Customer Personal Data are subject to contractual or statutory confidentiality obligations and receive appropriate guidance on the secure handling of personal data. |
Hosting and infrastructure | The Service is hosted using reputable cloud infrastructure providers. Details of current hosting providers and sub-processors are set out in Annex B. |
Availability and resilience | Appropriate measures are maintained to promote the ongoing availability and resilience of systems used to provide the Service, including backup and recovery processes where appropriate. |
Monitoring and incident management | Systems are monitored for security events and procedures are maintained for identifying, managing and responding to security incidents and personal data breaches. |
Business continuity | Business continuity and disaster recovery arrangements are maintained and reviewed periodically to support the restoration of service following an incident. |
Testing and review | Technical and organisational measures are reviewed periodically and updated where appropriate to address changes in technology, security risks and the nature of the processing. |
Sub-processors | Sub-processors are appointed only in accordance with this DPA and are contractually required to implement appropriate technical and organisational measures to protect Customer Personal Data. |
1. Purpose and scope
1.1 Incorporation
1.2 Application
1.3 Purpose
1.4 Commencement
1.5 Order of precedence
1.6 Controller processing excluded
2. Definitions
2.1 Controller, processor, data subject, personal data, personal data breach, processing and sub-processor
2.2 Customer Personal Data
2.3 Data Protection Legislation
2.4 Capitalised terms
3. Roles of the parties
3.1. Controller and processor
3.2 Details of processing
3.3 Your responsibilities
3.4 Our controller processing
4. Processing instructions
4.1 Processing on your instructions
4.2 Documented instructions
4.3 Legally required processing
4.4 Infringing instructions
5. Processor obligations
5.1 Our obligations
6. Sub-processors
6.1 Our obligations
6.2 Flow-down obligations
6.3 Our responsibility
6,4 Changes to sub-processors
6.5 Objections
7. Security
7.1 Security measures
7.2 Updates to measures
7.3 Specific measures
7.4 Hosting and infrastructure
7.5 Further information
8. Personal data breaches
8.1 Breach notification
8.2 Contents of notification
8.3 Further information and cooperation
8.4 No third-party notification
9. Data subject requests and compliance assistance
9.1 Your responsibility
9.2 Our assistance
9.3 Assistance through the Service
9.4 Requests received by us
10. Audits
10.1 Information on request
10.2 Compliance documentation
10.3 Further audits
10.4 Audit costs
11. International Data Transfers
11.1 Transfers permitted
11.2 Transfer safeguards
11.3 Transfer locations
12. Term and Termination
12.1 Duration
12.2 Return or deletion
12.3 Deletion timeframe
12.4 Legally required retention
13. Notices
13.1 Form of notice
13.2 Addresses for notices
13.3 Deemed receipt
13.4 Legal proceedings
Annex A — Processing Activities
Annex B — Sub-Processors
Annex C — Technical and organisational measures
Privacy and Cookie Policy
Last Updated: 16 July 2026
Float respects your privacy and is committed to protecting your personal data. This policy explains how we look after your personal data, sets out your privacy rights, and tells you how the law protects you when:
you visit our website at floatapp.com (the Site);
- you access our platform through the Site (the Platform); and
- we provide our cash flow forecasting services through the Platform (the Services).
It applies to two groups:
- Users, being anyone accessing the Site or Platform; and
- Customers, being any individual, business or organisation using the Services, including their employees, agents and contractors.
The Site and Platform are not intended for children, and we do not knowingly collect personal data relating to children.
We may update this policy from time to time to reflect changes to our business, the Service or applicable law. The latest version will always be on our Site. Where changes are significant, we will let you know by email or through the Service.
Who We Are
Float is provided by The Float Yard Ltd, a company registered in Scotland under company number SC386627 and with its registered office at 5 South Charlotte Street, Edinburgh EH2 4AN (Float, we, us or our). Float is cloud-based cash flow forecasting software that connects with the accounting platforms Xero, QuickBooks Online and FreeAgent. We are registered with the Information Commissioner's Office (ICO) under registration number Z2903532.
We comply with the Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU General Data Protection Regulation (EU GDPR) (together, the Data Protection Legislation).
When we are a controller, and when we are a processor
It matters which role we are playing in relation to your data, because it determines which document governs:
- As a controller, we process personal data about you and your relationship with us, including your account and registration details, billing, customer support queries, the marketing you receive, and how you use the Service. This policy explains how we handle that data.
- As a processor, we process the accounting and financial data you connect or import from Xero, QuickBooks Online or FreeAgent. That data may include personal data about your own employees, contractors, suppliers and clients. In relation to that personal data, you remain the controller and we process it only on your documented instructions for the purpose of providing the Service. That processing is governed by our Data Processing Agreement, not by this policy.
In short: this policy covers the personal data we hold about you. The Data Processing Agreement covers the personal data you bring into Float about other people.
Our Data Protection Officer (DPO)
Our DPO is responsible for overseeing questions about this policy, and you can contact them by email at dpo@floatapp.com.
Complaints
You can complain to the Information Commissioner's Office (ICO), the UK's supervisory authority, at any time (ico.org.uk). We would, however, appreciate the opportunity to address your concerns before you contact the ICO, so please do contact us first.
Accounting data: the financial and accounting data you sync from Xero, QuickBooks Online or FreeAgent is handled under our Data Processing Agreement, where you are the controller and we are your processor - see Section 1 above.
Purpose | Data Used | Lawful basis |
Register and manage your account | Identity, Contact | Performance of a contract |
Provide and operate the Service | Identity, Contact, Transaction, Technical, Profile | Performance of a contract; legitimate interests (operating, maintaining and securing the Service) |
Take payment and recover sums owed | Cloud hosting and Identity, Contact, Financial, Transaction | Performance of a contract; legitimate interests (recovering debts due to us); legal obligation |
Provide customer support | Identity, Contact, Profile, Usage | Performance of a contract; legitimate interests |
Keep you informed (service messages, changes to the Services, this policy, our Data Processing Agreement or our Terms and Conditions) | Identity, Contact | Performance of a contract; legal obligation |
Improve and develop the Service | Technical, Usage, Profile | Legitimate interests (understanding, monitoring and improving how the Service is used) |
Send relevant updates and offers | Identity, Contact, Profile, Usage, Marketing and Communications | Legitimate interests; consent where required |
To manage recruitment activities and assess candidates for employment or contractor roles | Identity, Contact, Recruitment | Legitimate interests (assessing suitability for current and future roles and manage recruitment processes); contract (taking steps at your request prior to entering into an employment or contractor agreement); legal obligation (complying with employment, immigration and equality laws where applicable) |
Where we process your personal data on more than one lawful basis, you may contact us if you would like further information about the lawful basis or bases we rely on in any particular circumstance.
Marketing
We may use your Identity, Contact, Profile and Usage Data to send you marketing about Services and offers we think will be relevant. You'll receive these only where you've asked for information, subscribed, or otherwise not opted out, and you can opt out at any time in one click. Every marketing email includes an unsubscribe link in its footer, and you can also update your marketing preferences from within your account or by emailing us at dpo@floatapp.com. Opting out of marketing won't stop service-related messages (for example, about billing or changes to the Service).
Change of purpose
We'll only use your personal data for the purposes we collected it for, unless we reasonably consider we need to use it for a compatible purpose. If we need to use it for an unrelated purpose, we'll notify you and explain the legal basis.
Introduction
Who We Are and Our Role
1. The Personal Data We Collect
2. How We Collect Your Personal Data
3. How We Use Your Personal Data
4. Cookies and Similar Technologies
5. Who We Share Your Personal Data With
6. International Transfers
7. Data Security
8. Data Retention
9. Your Legal Rights
10. Third Party Links
11. Contact
Terms and Conditions
Last Updated: 16 July 2026
Introduction
These terms and conditions (Agreement) are between you and The Float Yard Ltd, a company registered in Scotland under company number SC386627, and with its registered office at 5 South Charlotte Street, Edinburgh EH2 4AN (Float, we, us or our).
This Agreement comes in three parts:
- Part A - Website Terms of Use applies to everyone who visits or uses our website at floatapp.com (the Site).
- Part B - Service & Subscription Terms applies if you register for, subscribe to or use the Float cash flow forecasting service (the Service).
- Part C - General Terms applies to both.
By using the Site, you agree to Part A and Part C. By creating an account or using the Service, you also agree to Part B. If you're agreeing on behalf of a business, you warrant to us that you have authority to bind that business to this Agreement, and you and your refer to it.
Accessing or using the Site does not of itself create any contractual relationship between you and us in relation to the Service. Any subscription for the Service is governed by Part B of this Agreement.
This Agreement incorporates our Privacy and Cookie Policy and, where you use the Service, our Data Processing Agreement. We will process any personal data you provide in accordance with our Privacy Policy, as further detailed in clause 10.
If you don't agree to this Agreement, please don't use the Site or the Service.
Part A - Website Terms of Use
1. Using the Site
1.1 Acceptable use
You may use the Site for your own lawful, personal or business purposes. You agree not to:
- use the Site in any way that breaks the law or any applicable regulation, or that is fraudulent or harmful;
- attempt to gain unauthorised access to the Site, its servers, or any connected system;
- introduce viruses or other harmful material, or otherwise disrupt the Site; or
- damage, disable, overburden or impair the Site or interfere with any other person's use of it;
- collect or harvest data from the Site or attempt to intercept or decipher any communications to or from the Site; or
- scrape, copy, resell or systematically extract content from the Site except as allowed below.
1.2 Text and data mining
You must not conduct, facilitate, authorise or permit any text or data mining or web scraping in relation to the Site using any automated means (including bots, spiders, scrapers or similar technologies), except where this cannot lawfully be excluded by contract.
1.3 AI and machine learning
You must not use the Site or any content made available through it to develop, train, fine-tune or validate any artificial intelligence or machine learning model, except where such restriction cannot lawfully be enforced.
1.4 Consequences of breach
If you breach this clause 1, we may suspend or terminate your access to the Site immediately.
2. Our content
2.1 Ownership and licence
The Site and its content, including text, graphics, logos and software, belong to Float or our licensors and are protected by intellectual property laws. We grant you a limited, non-exclusive, non-transferable licence to access and use the Site for your own lawful business or personal purposes above. All other rights are reserved.
2.2 Permitted use
You may print or download reasonable extracts of the Site for your own personal or internal business use, provided you do not modify them, remove any proprietary notices or use them for commercial exploitation.
3. Information on the Site
3.1 General information only
The Site and its content, including text, graphics, logos and software, belong to Float or our licensors and are protected by intellectual property laws. We grant you a limited, non-exclusive, non-transferable licence to access and use the Site for your own lawful business or personal purposes above. All other rights are reserved.
3.2 Professional advice
You must obtain appropriate professional advice before taking, or refraining from taking, any action based on the Site.
3.3 Accuracy
While we take reasonable care, we make no representations or warranties, whether express or implied, that the content of the Site is always accurate, complete or up to date.
4. Links to other sites
The Site may link to third-party websites and resources. We provide these for convenience and don't control or endorse them, and we're not responsible for their content or their privacy practices. Please review the terms and privacy notices of any site you visit.
5. Availability
5.1 No guarantee of availability
While we take reasonable care, we make no representations or warranties, whether express or implied, that the content of the Site is always accurate, complete or up to date.
5.2 Updates and changes
While we take reasonable care, we make no representations or warranties, whether express or implied, that the content of the Site is always accurate, complete or up to date.
5.3 Your equipment
You are responsible for ensuring that you have suitable devices, software and an internet connection to access the Site.
5.4 Security and viruses
While we take reasonable steps to keep the Site secure, we do not guarantee that it will be free from bugs, viruses or other harmful material. You are responsible for using appropriate virus protection software and configuring your own devices and systems to access the Site.
6. The Service
6.1 What the Service is
Float is an online tool that lets businesses produce cash flow forecasts and related tasks through an online account (a Float Account). Each Float Account can support multiple businesses, and each business needs its own subscription. We may revise, update or modify the Service from time to time, and for material changes we'll give reasonable notice through the Site or to the account administrator.
6.2 Changes to the Service
We may revise, update, modify, enhance or discontinue any part of the Service from time to time, including to improve functionality, maintain security, comply with legal requirements or reflect changes to our business. We do not guarantee that any particular feature or functionality will remain available.
6.3 Notice of material changes
Where we make a material adverse change to the core functionality of the Service, we'll give reasonable notice through the Site or to the Administrator where reasonably practicable.
6.4 Maintenance and suspension
We may temporarily suspend access to all or part of the Service for maintenance, upgrades, emergency repairs or security reasons. We will use reasonable efforts to minimise any disruption.
6.5 Plan-specific features
Certain features or functionality may only be available under particular subscription plans.
7. Your account and users
7.1 Administrators and Additional Users
When you first register, you (or someone you authorise) are the Administrator. Administrators can invite others to access the Service through the same account (Additional Users), such as employees, accountants, contractors, agents or clients, subject to any limits in your subscription.
7.2 Administrator responsibilities
Administrators are responsible for the access they grant, including the ability of Additional Users to view, copy or delete content and to add charges to the subscription. Only an Administrator can appoint a replacement Administrator.
7.3 Additional User access
Additional Users access the Service with the rights the Administrator grants, and may not have the same level of access. If an Administrator closes an account, Additional Users will lose access to it.
7.4 Accurate information
You must ensure that all information provided when creating or maintaining your account is accurate, complete and kept up to date.
7.5 Acceptance by users
All users must accept this Agreement before accessing the Service.
7.6 Account security
You are responsible for:
- keeping usernames, passwords and other login credentials secure and confidential;
- all activities carried out using your account, whether authorised by you or not, unless caused by our breach of this Agreement; and
- promptly notifying us in writing if you know or suspect any unauthorised access to or use of your account.
7.7 Responsibility for users
You must ensure that all Additional Users comply with this Agreement. You remain responsible for all acts and omissions of your Additional Users as if they were your own.
7.8 No credential sharing
You must not share login credentials between multiple individuals or permit anyone to access the Service other than authorised users under your subscription.
8. Subscriptions, payment and renewal
8.1 Basis of subscription
The Service is licensed on a monthly or annual subscription for each Float Account, to the user who pays for it. Details of the plan you choose are set out at the point of purchase, on our pricing page, or as otherwise agreed with you in writing.
8.2 Subscription commencement
Your subscription begins when we accept your order and receive your first payment (or otherwise make the Service available to you). Subscription fees are payable in advance for each billing period.
8.3 Currency and tax
We bill in pounds sterling, US dollars, Australian dollars or Euros. Our prices are exclusive of VAT and any other applicable taxes, which we'll add where they apply.
8.4 Payment
We charge your agreed payment method when you subscribe. If we can't successfully process payment, we may retry payment, suspend your access to the Service, and if payment remains outstanding, terminate this Agreement in accordance with clause 18. You authorise us to use card-updater or recurring-billing programmes to keep your payment details current. You are responsible for ensuring your payment details remain accurate and up to date.
8.5 Renewal and cancellation
Subscriptions renew automatically at the then-current rates unless you cancel before your next renewal date. Cancellation takes effect at the end of the current subscription period and you will continue to have access to the Service until that date unless this Agreement is terminated earlier.
8.6 Refunds
Annual plans are not refundable after 30 days. If you tell us you wish to cancel an annual plan within 30 days of it starting, you'll be eligible for a pro-rated refund. Except as expressly stated in this Agreement or where required by applicable law, subscription fees are non-refundable.
8.7 Price changes
We may change our prices from time to time. We'll give you at least 30 days' notice of any change, after which the new prices apply to your subscription as part of these terms. Any revised pricing will apply from your next renewal date following expiry of the notice period. If you are using a free trial and have not yet subscribed, the price applicable when you subscribe will be the price shown or otherwise agreed with you at that time, unless we have expressly agreed to honour a different price for a specified period.
8.8 Discounts
Where you receive a special or discounted price, it applies only while your payments continue without interruption. If you cancel, or your payments lapse, the discount will no longer apply, and our standard rates will apply to your Float Account after 30 days.
8.9 Promotional offers
We may offer promotional pricing or free periods from time to time. Unless we expressly state otherwise, these promotions apply only to the initial subscription period and do not affect future renewal pricing.
9. Your content
9.1 Ownership and licence
You're responsible for all data and materials you upload, sync or store through the Service (Content), and for keeping your own copies. You retain ownership of your Content. Please archive frequently, as we're not responsible for lost or unrecoverable Content. You grant Float a worldwide, royalty-free, non-exclusive licence to host, copy, store, process, transmit, back up, modify (solely for technical purposes), and use your Content solely to provide the Service and to perform our obligations under this Agreement.
9.2 Your warranties
You represent and warrant that you own, or have all necessary rights, licences and permissions to upload, use and permit us to process your Content in accordance with this Agreement.
9.3 Prohibited content
You agree not to use the Service to upload or share anything that is unlawful, fraudulent, defamatory, obscene, harassing or otherwise objectionable; that impersonates someone else or breaches another person's privacy; that contains viruses or harmful code; or that infringes anyone's intellectual property rights.
9.4 Removal of content
We reserve the right (but are not obliged) to remove, disable access to or refuse to process any Content which we reasonably believe breaches this Agreement or applicable law.
10. Data protection
10.1 Our role
How we handle personal data depends on our role:
- Where we are the controller: for personal data about you and your Float Account (such as registration, billing, marketing and usage data), we act as the controller and process it in line with our Privacy and Cookie Policy.
- Where we are the processor: for the accounting and financial data you connect or import from Xero, QuickBooks Online or FreeAgent, which may include personal data about your own employees, contractors, suppliers and clients, you are the controller and we act as your processor. We process that data only on your instructions, as set out in our Data Processing Agreement, which is incorporated into and forms part of this Agreement.
10.2 Your confirmations
You confirm that you have the necessary rights and a lawful basis to provide that data to us, and that you've given any notices and obtained any permissions required for us to process it to provide the Service, including transferring it to our sub-processors and storing it in the locations described in the Data Processing Agreement. You also acknowledge that we may make data in your Float Account available to the Additional Users to whom it relates.
10.3 Order of precedence
Where there is any inconsistency between this Agreement and the Data Processing Agreement in relation to the processing of personal data, the Data Processing Agreement shall prevail to the extent of that inconsistency.
10.4 Changes to privacy policy
We may update our Privacy Policy from time to time. Any changes will take effect in accordance with that policy.
11. Connecting your accounting platform
11.1 Authority to connect
We may let you transfer data from a third-party product (such as Xero, QuickBooks Online or FreeAgent) into the Service. To do this on your behalf, you may need to give us your login details for that product, which we'll hold in encrypted form and use only to provide this feature or as you direct. You confirm you're authorised to provide those details, and you appoint Float as your agent, with limited authority, to access the third-party product and retrieve data on your behalf.
11.2 Third-party terms
You're responsible for complying with the terms of any third-party product, and for any fees it charges. Third-party products are operated by others, not Float, and we're not responsible for their actions, availability or any changes they make that affect the transfer of data.
11.3 No integration warranty
We don't warrant that any integration with a third-party product will remain available or continue to function without interruption. Third-party providers may modify, suspend or discontinue their services or application programming interfaces (APIs) at any time, and we aren't responsible for any resulting impact on the Service.
11.4 Revoking access
You may revoke our authority to access a third-party product at any time by disconnecting the relevant integration or changing your access credentials. You acknowledge that doing so may prevent some features of the Service from functioning correctly.
12. Service providers
12.1 Use of Service Providers
We may use third parties to help operate the Service or to perform our obligations (each a Service Provider). To do so, we may share a limited amount of your data with them. Our agreements with Service Providers govern how they handle that data and prohibit them from using it for purposes unrelated to the Service. Where Service Providers process personal data on your behalf, they do so as our sub-processors under the Data Processing Agreement.
12.1 Our responsibility
We remain responsible for the performance of our Service Providers to the extent required under this Agreement, although we aren't responsible for any separate services you contract for directly with them.
13. Trial and beta features
13.1 Free trials
If you register for a trial, you'll have access for the trial period only. Unless you subscribe before the trial ends, your access may be suspended or terminated and any Content created during the trial may be deleted. You'll need to subscribe before it ends to continue using the Service and to retain access to any Content stored within it.
13.2 Beta features
From time to time we may offer beta, preview, or early access features. These features are provided for evaluation purposes and may be modified, suspended or withdrawn at any time without notice. They are provided and "as is" and “as available”, may contain bugs or errors, and may not be subject to the same security, support, availability or performance standards as the main Service. Your use of beta features is at your own risk. We have no obligation to make any beta feature generally available or to continue supporting it.
14. Intellectual property rights
14.1 Licence to use the Service
The Service is protected by intellectual property laws, and we grant you limited, non-exclusive, non-transferable and revocable licence to use it during your subscription solely for your own internal business purposes for as long as you meet your payment obligations and comply with this Agreement. We reserve all other rights.
14.2 Free trials
You agree not to:
- copy, modify, adapt, translate or create derivative works from the Service;
- reverse engineer, decompile, disassemble or otherwise attempt to discover the source code of the Service, except to the extent such restriction is prohibited by law;
- license, sublicense, sell, lease, rent, assign, distribute or otherwise make the Service available to any third party except as expressly permitted by this Agreement;
- remove, obscure or alter any copyright, trade mark or other proprietary notices contained within the Service;
- circumvent or interfere with any security features or technical restrictions within the Service;
- use the Service to develop or provide a competing product or service; or
- use the Service in any manner not expressly permitted by this Agreement.
14.3 Feedback
If you give us feedback, suggestions, ideas or recommendations relating to the Service (Feedback) you grant us a perpetual, irrevocable, worldwide, royalty-free, transferable and sub-licensable licence to use, modify and incorporate that Feedback into our products and services without restriction and without any obligation to compensate you.
15. Confidentiality
15.1 Confidentiality obligations
Each party shall keep confidential all confidential information disclosed by the other party in connection with this Agreement, including without limitation any commercial, financial, technical or business information (whether or not marked as confidential), and shall not disclose it to any third party except where necessary to perform this Agreement, required by law or with the other party's prior written consent.
15.2 Exceptions
This clause does not apply to information which is or becomes publicly available other than through a breach of this Agreement, was already lawfully known to the receiving party or is independently developed without reference to the confidential information.
16. Warranties and disclaimers
16.1 No implied warranties
To the fullest extent permitted by law, the Service is provided "as is" and "as available", and we don't give any implied warranties, including as to satisfactory quality, fitness for a particular purpose, or non-infringement. Nothing in this Agreement excludes any warranty or other right which cannot lawfully be excluded or limited under applicable law.
16.2 No guarantee of performance
We don't warrant that the Service will be uninterrupted, error-free or secure, or that it will meet your requirements or any legal or regulatory obligations that apply to you. You remain responsible for ensuring your use of the Service complies with the laws that apply to you.
16.3 Forecasts are estimates
The Service provides cash flow forecasting and related functionality based on the information and assumptions you input or import. Forecasts, projections and reports generated by the Service are estimates only and are not guarantees of future financial performance or outcomes. You remain responsible for reviewing and verifying all outputs before relying on them for any business, financial or commercial decision.
16.4 No professional advice
We don't provide financial, accounting, tax, investment or legal advice through the Service. You should obtain appropriate professional advice where required.
16.5 Your responsibilities
You are responsible for maintaining appropriate backups of your Content and for ensuring that your devices, systems and internet connection are suitable for accessing the Service.
16.6 No other warranties
Except as expressly stated in this Agreement, we make no representations, warranties or guarantees, whether express, implied or statutory, in relation to the Service.
17. Limitation of liability and indemnity
17.1 Liability we don't exclude
Nothing in this Agreement limits or excludes our liability where it would be unlawful to do so, including for death or personal injury caused by our negligence, for fraud or fraudulent misrepresentation, or for any other liability which can’t lawfully be excluded or limited.
17.2 Liability cap
Subject to clause 17.1, our total aggregate liability arising out of or in connection with this Agreement, whether in contract, tort (including negligence), breach of statutory duty or otherwise, shall not exceed the total subscription fees paid by you for the Service in the 12 months before the date on which the claim arose.
17.3 Excluded losses
Subject to clause 17.1, we shall not be liable for any:
- loss of profits or revenue;
- loss of business or business opportunity;
- loss of anticipated savings;
- loss of goodwill or reputation;
- loss arising from telecommunications failures, internet outages or failures of third-party software or services outside our reasonable control; or
- indirect, special or consequential loss
17.4 Indemnity
You agree to indemnify Float against any losses, liabilities, damages, costs and reasonable legal expenses arising from:
- your unlawful use of the Service;
- your Content infringing the intellectual property or other rights of any third party; or
- your breach of applicable law.
18. Suspension and termination
18.1 Grounds for suspension or termination
We may suspend or terminate your access to the Service if:
- you commit a material breach of this Agreement;
- you fail to pay any subscription fees when due;
- we reasonably believe your use of the Service presents a security risk or may adversely affect the Service or other users;
- we are required to do so by law; or
- you become insolvent or cease trading.
18.2 Suspension to investigate
We may also suspend access to the Service where reasonably necessary to investigate suspected fraud, unlawful activity or misuse of the Service.
18.3 Effect of termination
On termination:
- Your right to access and use the Service will immediately end;
- all outstanding payments become immediately due and payable;
- you should export any Content you wish to retain before your access ends; and
- subject to our retention obligations under applicable law, we’ll delete your Float Account data in accordance with our Data Processing Agreement and Privacy and Cookie Policy
18.4 Content after termination
After termination, you may lose access to your Content, so please keep your own copies. We handle personal data after termination as set out in our Data Processing Agreement and Privacy Policy. In the ordinary course, Float Account data is deleted within 90 days.
18.5 Survival
Clauses which by their nature are intended to survive termination, including those on relating to intellectual property, confidentiality, payment obligations, liability, indemnity and governing law, shall remain in force.
19. General terms
19.1 Conflicts
In the event of any inconsistency between this Agreement and the Data Processing Agreement in relation to the processing of personal data, the Data Processing Agreement shall prevail.
19.2 Force majeure
- Where an event outside our reasonable control occurs, this is a force majeure event and includes, but is not limited to, storm, fire, flood, earthquake, an act of God, a natural disaster, war, terrorism, riot or civil commotion, malicious damage, strikes or other industrial disputes (whether or not involving our workforce), a cyber-attack or other malicious interference with our systems, a failure or interruption of the internet or of any telecommunications, hosting or cloud services, a failure of electricity or power supplies, epidemic, pandemic, compliance with any law or government rules, regulations or guidance, or a failure of a third-party supplier to perform its obligations.
- Where a force majeure event occurs, we are excused from performance under these Terms to the extent our performance is prevented, hindered or delayed by it, and will not be liable to you for any failure or delay in performing our obligations. We will notify you as soon as reasonably practicable if a force majeure event materially affects the Site or the Services. We will use reasonable efforts to resume performance as soon as reasonably practicable after the force majeure event has ended.
- If a force majeure event continues for more than 60 consecutive days, either party may terminate the affected Services by giving written notice to the other.
19.3 Changes to this Agreement
We may change this Agreement from time to time. Where changes are material, we'll give reasonable notice through the Site or to the account Administrator. Your continued use of the Site or Service after changes take effect means you accept them.
19.4 Entire agreement
This Agreement and any document expressly referred to in it contain the entire agreement between us and you with respect to their subject matter and supersede and extinguish any and all previous agreements, representations, warranties, promises, assurances and understandings between us and you relating to that subject matter. Each party acknowledges that, in entering into this Agreement, it has not relied on any statement, representation or warranty other than those expressly set out in this Agreement. Nothing in this clause limits or excludes liability for fraud.
19.5 Severability
In the event that one or more of the provisions of these Terms is or are found to be unlawful, invalid or otherwise unenforceable, that or those provision(s) shall be deemed severed from the remainder of these Terms, which shall remain valid and enforceable. If any provision is capable of modification so as to be valid and enforceable, it shall be interpreted accordingly to the minimum extent necessary.
19.6 Assignment
You may not assign this Agreement without our written consent. We may assign it to an affiliate, or in connection with a sale, merger or reorganisation of our business. We may also subcontract any of our obligations under this Agreement, provided we remain responsible for their performance.
19.7 No waiver
No failure or delay by us in exercising any of our rights under these Terms shall be deemed to be a waiver of that right, and no waiver by us of a breach of any provision of these Terms shall be deemed to be a waiver of any subsequent breach of the same or any other provision.
19.8 Third party rights
Unless expressly stated otherwise, these Terms do not give rise to any rights under the Contract (Third Party Rights) (Scotland) Act 2017 to enforce any term of these Terms.
19.9 Notices
All notices under this Agreement shall be in writing and served by email. We will use the email address associated with your account, and you can contact us at support@floatapp.com. A notice sent by email will be deemed received when it is capable of being accessed by the recipient, unless the sender receives an automated message indicating that delivery has failed. This arrangement does not apply to the service of any documents in legal proceedings, which cannot be served by email.
19.10 Contacting us
You can contact us at support@floatapp.com, and for data protection matters at dpo@floatapp.com.
19.11 Governing law and jurisdiction
This Agreement is governed by Scots law, and you and Float submit to the exclusive jurisdiction of the Scottish courts. We may still seek urgent or injunctive relief in any court of competent jurisdiction to protect our rights or intellectual property.