Legal
Privacy Policy
Last Updated: [DATE]
This Privacy Policy explains how Simple Self-Employed collects, uses, stores and protects your personal information.
We are committed to protecting your privacy and handling your personal information responsibly and transparently.
Please read this policy carefully.
1. Who We Are
Simple Self-Employed is operated by:
[COMPANY NAME]
Registered in England and Wales.
Company Number: [COMPANY NUMBER]
Registered Address:
- [REGISTERED ADDRESS]
- Email:
- [PRIVACY EMAIL]
For the purposes of UK GDPR and applicable data protection laws, [COMPANY NAME] is the data controller responsible for your personal information.
2. The Information We Collect
We collect information that you provide directly to us, information generated through your use of the Service, and certain technical information.
Information You Provide
When you create an account or use the Service, you may provide:
- Account Information
- Name
- Email address
- Password or authentication details
- Subscription information
- Financial Information
- Bank transaction data
- Credit card transaction data
- Salary information
- Dividend information
- Self-employed income information
- Property income information
- Tax profile information
- Pension contribution information
- Student loan information
- Other financial information entered by you
- Uploaded Documents
- CSV files
- Transaction imports
- Reports
- Notes
- Supporting records
- Information Collected Automatically
- When you use the Service we may automatically collect:
- Device Information
- Device type
- Browser type
- Operating system
- Usage Information
- Pages visited
- Features used
- Actions performed
- Session duration
- Technical Information
- IP address
- Error logs
- Diagnostic information
3. Why We Collect Your Information
We use personal information to:
- Provide the Service
- Including:
- Creating accounts
- Managing subscriptions
- Generating reports
- Producing tax estimates
- Providing customer support
- Improve the Service
- Including:
- Fixing bugs
- Monitoring performance
- Understanding usage patterns
- Developing new features
- Meet Legal Obligations
- Including:
- Fraud prevention
- Security monitoring
- Legal compliance
- Responding to lawful requests
4. Lawful Basis for Processing
Under UK GDPR we rely on the following lawful bases:
Contract
Processing necessary to provide the Service you have requested.
Examples:
- Creating your account
- Storing your transactions
- Generating reports
- Legitimate Interests
Processing necessary for our legitimate interests.
Examples:
- Improving the Service
- Maintaining security
- Preventing abuse
- Analysing product usage
- Legal Obligation
Processing required to comply with legal requirements.
Examples:
- Financial record keeping
- Fraud prevention
- Responding to lawful authorities
- Consent
Where consent is required, such as certain marketing communications, you may withdraw consent at any time.
5. Tax and Financial Information
The Service allows users to store financial and tax-related information.
This information may include:
- Income records
- Salary information
- Dividend information
- Transaction histories
- Tax profile information
We process this information solely to provide the functionality of the Service.
We do not sell financial information.
We do not share financial information with advertisers.
We do not provide financial information to HMRC unless legally required to do so.
6. How We Store Information
We take reasonable technical and organisational measures to protect your information.
These measures may include:
- Encrypted connections (HTTPS/TLS)
- Access controls
- Authentication systems
- Infrastructure security controls
- Secure cloud hosting
No system can guarantee complete security.
You acknowledge that transmitting information over the internet carries inherent risks.
7. Third-Party Service Providers
We use carefully selected third-party providers to operate the Service.
Depending on our infrastructure, these providers may include:
- Hosting Providers
- Examples:
- Vercel
- Cloud hosting providers
- Database Providers
- Examples:
- Neon
- PostgreSQL hosting providers
- Authentication Providers
- Examples:
- Clerk
- Authentication service providers
- Payment Providers
- Examples:
- Stripe
- Analytics Providers
- Examples:
- Plausible
- Google Analytics
- PostHog
These providers process information on our behalf and only as necessary to provide their services.
They are subject to contractual obligations regarding data protection and confidentiality.
8. International Transfers
Some of our service providers may process information outside the United Kingdom.
Where international transfers occur, we take reasonable steps to ensure appropriate safeguards are in place.
These safeguards may include:
- Adequacy regulations
- Standard contractual clauses
- Equivalent legal protections
9. Data Retention
We retain information only for as long as reasonably necessary.
Retention periods may vary depending on:
- The type of information
- Legal requirements
- Operational needs
- Account Information
Typically retained while your account remains active.
Financial Records
Typically retained while required to provide the Service or fulfil legal obligations.
Deleted Accounts
Data may remain in backups for a limited period following deletion before being permanently removed.
10. Your Rights
Under UK GDPR, you may have the right to:
Access
Request a copy of your personal information.
Rectification
Request correction of inaccurate information.
Erasure
Request deletion of your information in certain circumstances.
Restriction
Request limits on how your information is processed.
Portability
Request your information in a structured, machine-readable format.
Objection
Object to certain processing activities.
Withdraw Consent
Where processing is based on consent.
To exercise your rights, contact:
[PRIVACY EMAIL]
11. Marketing Communications
We may send service-related communications regarding:
- Account activity
- Security notices
- Billing information
- Product updates
Where marketing communications are sent, you may opt out at any time.
Service-related communications cannot always be disabled.
12. Cookies
We may use cookies and similar technologies to:
- Maintain sessions
- Improve functionality
- Measure performance
- Analyse website usage
Additional information will be provided in our Cookie Policy where applicable.
13. Children
The Service is not intended for individuals under the age of 18.
We do not knowingly collect personal information from children.
If we become aware that information has been collected from a child, we will take reasonable steps to remove it.
14. Changes to This Policy
We may update this Privacy Policy from time to time.
The latest version will always be published on our website.
Material changes may be communicated through the Service or by email.
15. Complaints
If you have concerns about how we handle your information, please contact us first.
You also have the right to lodge a complaint with:
- Information Commissioner’s Office (ICO)
- Website:
- https://www.ico.org.uk
16. Contact Us
Questions regarding this Privacy Policy should be directed to:
- [PRIVACY EMAIL]
- or
- [COMPANY NAME]
- [REGISTERED ADDRESS]
By using the Service, you acknowledge that you have read and understood this Privacy Policy.