This Privacy Policy explains how Upla (“Upla”, “we”, “us”) collects, uses, and shares personal data when you visit upla.uk or use our QuickBooks® Online integrations and related services (the “Services”).
Controller: Hupla Ltd (t/a Upla), a company registered in England and Wales.
Registered office / company number: Cambridge UK / 16183153.
Email: privacy@upla.uk
If you are an EU/EEA resident, you may contact us at the above email regarding our EU representative arrangements.
We collect data directly from you, from QuickBooks Online after you grant access, from your use of the Services, and from publicly available or third‑party sources (e.g., analytics or anti‑fraud services).
We share personal data with: (a) Intuit Inc. (QuickBooks Online) as necessary for the integration; (b) hosting, storage, email, logging, analytics, and customer support providers; and (c) professional advisers, and where required by law. We do not sell personal data.
Your data may be transferred outside the UK/EEA (for example, to the United States) and protected by appropriate safeguards such as the UK International Data Transfer Addendum (IDTA) and/or EU Standard Contractual Clauses, plus additional technical and organisational measures.
We implement appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest (for sensitive credentials), access controls, least‑privilege, and regular monitoring. No method of transmission or storage is 100% secure.
We retain personal data for as long as necessary to provide the Services and for legitimate business or legal purposes (e.g., record‑keeping). OAuth tokens may be deleted when you disconnect the integration or after extended inactivity.
Subject to applicable law, you have rights to access, rectify, erase, restrict, object to processing, and to data portability. You also have the right to withdraw consent (where relied upon) at any time. To exercise these rights, contact privacy@upla.uk.
You can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or your local supervisory authority.
The Services are not directed to children and are intended for business users aged 18+.
We use essential cookies to operate the site and may use analytics cookies to understand usage and improve the Services. Where required, we will ask for your consent. You can manage preferences through your browser or our cookie banner.
We may update this Policy from time to time. Material changes will be notified (e.g., via email or in‑app). The “Effective date” above indicates the latest version.
Email: privacy@upla.uk