1. INTRODUCTION

This privacy policy describes the personal data we may collect from you when you interact with our services. It explains why we collect the data, how we store and process it and keep it secure. We hope it answers any questions you may have, but if you need further information, please get in touch with us.

2. WHAT PERSONAL DATA DO WE COLLECT?

Online store

When you purchase something from our shop, our e-commerce system collects your name, address, telephone number, email address, IP address, orders and receipts, and whether you consent to receive marketing information from us. We do not store your payment card details.

Website

When you browse our website, we receive your IP address, and information about your computer operating system and web browser, including information from cookies that we or our online store provider may set on your computer. For more information about cookies, please see our cookies policy.

When you contact us via our contact form or email, we store the information you provide i.e. your name, email address and the content of your message.

Data provided through our products

When you use our products we store information about the computer and operating system you are using it on, so that we can provide technical support.

If you purchase a licence key and activate your tax return, we collect the date of activation, the date of the last successful submission of your tax return, and a unique non-identifiable code which ties your licence key to your tax return.

In the unlikely event that you encounter a fatal error in one of our products we will request that you send us an error report, optionally including your email address, containing information about the problem together with technical information about the computer on which the problem occurred.

3. HOW WE USE YOUR PERSONAL DATA

Order fulfilment

Data collected during the purchase and checkout procedure is used to fulfil your order and comply with our legal obligations. We retain this information in order to be able to respond to customer enquiries, process refunds, respond to complaints etc.

Customer service

Personal data supplied by you in communications via our contact form and/or email is used to assist you with any enquiry you make, and is retained to help you in future as necessary. Information collected from our products including the date of the last successful submission of your tax return, and a unique non-identifiable code which ties your licence key to your tax return are used to assist with customer enquiries, and to to ensure licence compliance. Technical information collected from any enquiries, or error reports are used to respond to requests for help, to improve our products and to fix any problems reported.

Marketing

We may use information provided by you for direct marketing purposes where you have explicitly consented. We may display feedback, or testimonials provided by you on our website where you have consented to it.

Legal bases

EU law sets out the reasons for which a company may collect and process your personal information. We collect information only for the following reasons:

• We need it to provide a service to you, provide customer support, and protect our service against fraud.
• We have a legitimate interest as part of running our business, such as marketing our services, protection of our legal rights, and research and development, where it does not negatively impact your data protection interests.
• You give us consent to do so for a specific purpose
• The law requires us to process your data

4. SHARING YOUR PERSONAL INFORMATION

We do not share your personal data with third parties except for the specific purposes set out below.

We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here. We also use Google Analytics to help us understand how our customers use our website - you can read more about how Google uses your Personal Information here. You can also opt-out of Google Analytics.

We use FreshDesk to manage our communications with our customers. Any information submitted via our contact form will be stored securely on FreshDesk's servers.

We will not share your personal information with other third parties except in accordance with our legal obligations.

We will never sell your data, or share it with other organisations for commercial purposes.

5. STORAGE AND SECURITY OF YOUR PERSONAL DATA

How long do we keep your personal data?

We will keep your data only for as long as necessary to fulfil the purpose for which it was collected. After that we will delete your data securely, or anonymise it such that it cannot be identified to you.

Order information: We will keep the information you provide when you purchase from our online store for 5 years to comply with legal and contractual obligations.

Other personal information: Any information you have provided via our contact form, or by email will be deleted or anonymised after 5 years

How is your personal data protected?

We take all appropriate measures to protect your data both in storage and in transmission.

We secure data transmission from our website and software products using SSL Secure Sockets Layer encryption.

Your personal details are stored in encrypted databases using password protected services. There is further information for each data processor we use below.

We use a number of subprocessors to provide services for our business. You can find information about how they secure and transmit your data from their privacy policies linked below

We use Amazon AWS in the EU (London) region to securely store some data. You can find more information about their policies here

Shopify provides our merchant services, and as such, will process and store your data if you make a purchase. Information about how they process the information and where it is transferred can be found in the the Shopify Privacy Policy, and in the Shopify Data Processing Addendum

We use Freshdesk to manage our customer support. If you contact us via our website contact form, the information you provide will be processed by their systems. You can find more information in their privacy policy

Access and control of your information

You have the right to

• request a copy of your information
• update your information, and make corrections in the case of any errors or omissions
• request deletion of you information, where deletion does not conflict with our obligations to retain your information for legal obligations, or record keeping purposes.
• withdraw any consent based processing of your data

Opting out of direct marketing

You can withdraw consent by clicking the opt-out link in emails we have sent you or by making a request through the contact form on our website.

6. WHERE YOUR PERSONAL DATA IS STORED/TRANSFERRED

Your data may be transferred outside of the EEA including to USA and Canada for processing by our subprocessors. You can find out more information by accessing the links in section 4 above.

7. CONTACT US

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information, please contact us at using the contact form on our website or by post at ABC Self Assessment Ltd, 30 Circus Mews, Bath BA1 2PW