GDPR Compliance Statement

Simplicity Upload LTD is the data controller for personal data processed via this website and service. We comply with the UK GDPR and the Data Protection Act 2018.

Lawful bases
  • Contract: to provide VAT submission services and your account.
  • Legal obligation: to retain invoices and VAT submission records as required by law.
  • Legitimate interests: to maintain service security, prevent fraud, and improve reliability.
Data we process
  • Account details: name, email, phone, company and address
  • VAT details: VRN, period dates, submission values, HMRC references
  • Payments: invoice metadata via Stripe (we do not store full card numbers)
  • Security: essential cookies, CSRF tokens, and device/session identifiers
Security & encryption
  • SSL/TLS for data in transit; restricted access and secure storage
  • Access/refresh tokens stored securely and deleted on account erasure
  • Strong password policy and optional 2-factor authentication
Retention
  • Account data: retained while your account is active
  • Invoices & VAT submissions: retained as required by law (e.g., up to 6 years)
  • HMRC OAuth tokens: deleted when we process your account erasure request or when you ask us to remove your HMRC connection (see below)
Your rights
  • Access, portability, rectification, erasure, restriction, and objection
  • To exercise these rights, email support@simplicity-upload.co.uk. We will verify your identity and respond within the timeframes required by UK GDPR (usually within one month).
  • If you request account erasure, we will anonymise or delete your account data where we are not legally required to keep it, delete HMRC OAuth tokens, and retain only records we must keep (for example VAT submissions and invoices for statutory retention periods).
Related policies

For full wording see our Privacy Policy, Cookie Policy, and Terms of Service.

Contact & security reporting

Simplicity Upload LTD (company number 16299799), Apartment 316, 21–33 Worple Road, London, England, SW19 4BJ
Email: support@simplicity-upload.co.uk
Phone: 07450 988884
Security contact: see /.well-known/security.txt on this site. We will notify HMRC (SDSTeam@hmrc.gov.uk) and the ICO within 72 hours of becoming aware of any personal data breach, as required.