Privacy Policy

Last updated: [date]

Placeholder — pending legal review. This is standard UK SaaS boilerplate drafted for structure, not a finished legal document. Have it reviewed by a solicitor before publishing live.

1. Who we are

[Company legal name], a company registered in England and Wales (company number [number]), of [registered address], is the data controller for personal data processed through this website and the Recipta product (“we”, “us”).

2. What we collect

Account and contact details you provide (name, work email, company name), usage data from this website (via cookies — see our Cookie Policy), and, within the product itself, expense claim data your organisation submits (categories, amounts, mileage, and associated approvals).

3. How we use it

To provide and operate the trial and paid service, to respond to enquiries, and to meet legal and accounting obligations. We do not sell personal data.

4. Legal basis (UK GDPR)

Contract (to provide the service you sign up for), legitimate interests (to respond to enquiries and improve the service), and consent (for non-essential cookies).

5. Data retention

[Retention period], or as required to meet legal, tax, or accounting obligations.

6. Your rights

Under UK GDPR you have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. Contact [privacy contact email] to exercise these rights, or complain to the Information Commissioner's Office (ICO).

7. Contact

[Company name], [address], [contact email].