[Replace placeholders below with your firm's details before going live.]
The data controller is [Firm Name], registered with the Information Commissioner's Office (registration number [ICO ref]). Contact: [firm-email].
When you upload a bank statement, we receive: your name, the reporting period you provide, and the contents of the statement file (transactions, dates, amounts, descriptions, balances).
We process this information to prepare a Profit & Loss account for your accountant to use in your Making Tax Digital quarterly update or annual return. Lawful basis: contract performance (UK GDPR Art. 6(1)(b)) for clients of the firm; legitimate interests (Art. 6(1)(f)) for prospective clients submitting test data.
Encrypted source statements and intermediate output files are deleted within 24 hours of processing. The final P&L workbook is retained by your accountant in line with the statutory record-keeping period (six years for tax records).
You have the right to access, correct, erase, or port your data, and to object to processing. To exercise any of these rights, contact [firm-email]. If you are unhappy with our response, you can complain to the Information Commissioner's Office.