Draft privacy notice. To be reviewed by a solicitor before launch.

Privacy notice

SnapMTD is run by [COMPANY NAME], registered in England and Wales, company number [NUMBER], registered office [ADDRESS]. We are the data controller for the personal data described here. ICO registration number: [NUMBER].

What we collect

• Your name, email address, WhatsApp number and National Insurance number.
• Receipts, invoices and voice notes you send us, and the details we read from them.
• Bank transactions from accounts you connect through our Open Banking provider.
• Your quarterly updates and HMRC's responses.
• Device and connection details HMRC requires us to send with every submission (fraud prevention data).

Why we use it

To provide the service you signed up for (contract), to meet our legal obligations, including HMRC's fraud prevention rules (legal obligation), and to keep the service secure (legitimate interests).

Who we share it with

HMRC; your partner accountant; and the suppliers that run parts of the service for us under data processing agreements: hosting ([PROVIDER]), WhatsApp messaging (Meta), Open Banking ([PROVIDER]), AI processing (Anthropic), email ([PROVIDER]) and payments (Stripe). We never sell your data.

How long we keep it

Your tax records are kept for at least 6 years after the tax year they relate to, so you can show HMRC your records. HMRC request logs are kept for at least 90 days.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email privacy@snapmtd.co.uk. You can also complain to the Information Commissioner's Office at ico.org.uk.