Legal
Privacy Policy
This policy explains how Oncommerce Limited handles personal data when you visit our website, create an account, or use InstaSurv and InstaFlow™.
Last updated: 3 June 2026
1. Overview
Oncommerce Limited operates InstaSurv. This Privacy Policy explains how we collect, use, store, and share personal data when you use our website and platform.
We process personal data as a data controller for account, billing, and platform operations. For client and property data entered by subscribing practices, we generally act as a data processor on the practice's instructions.
2. Data we collect
We may collect the following categories of information:
- Account details: name, email, practice name, role, and authentication data.
- Billing details: subscription plan, payment status, and billing contact information (payment card data is handled by our payment provider).
- Usage data: logins, feature usage, IP address, browser type, and device information for security and product improvement.
- Customer Data: clients, properties, reports, images, messages, and other content uploaded by your practice.
- Communications: support requests, onboarding correspondence, and feedback you send to us.
3. How we use data
We use personal data to:
- Provide, maintain, and secure the Service.
- Process subscriptions, trials, and billing.
- Provide onboarding, training, and customer support.
- Send service-related notices (e.g. security, billing, product updates).
- Improve reliability, diagnose errors, and develop new features.
- Comply with legal obligations and enforce our terms.
4. Legal bases (UK GDPR)
Where UK GDPR applies, we rely on: contract performance (providing the Service); legitimate interests (security, analytics, product improvement); consent where required (e.g. optional marketing); and legal obligation where applicable.
6. Retention & security
We retain data for as long as your account is active and as needed to provide the Service, resolve disputes, and meet legal requirements. Backups may persist for a limited period after deletion.
We implement appropriate technical and organisational measures to protect data. No online service can guarantee absolute security.
7. Your rights
Depending on applicable law, you may have rights to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability. You may also lodge a complaint with the ICO (ico.org.uk).
To exercise rights relating to your InstaSurv account, contact support@instasurv.co.uk. For data held on behalf of a surveying practice's clients, contact the practice directly in the first instance.
8. International transfers
Data may be processed in the UK and, where we use sub-processors abroad, we ensure appropriate safeguards such as UK adequacy regulations or standard contractual clauses.
9. Contact
Oncommerce Limited is the data controller for platform account and billing data.
Privacy enquiries: support@instasurv.co.uk. Website: https://instasurv.co.uk.
See also Terms of Service, Privacy Policy, and Cookies.