Privacy Policy

1. Data Controller

No Fear Tech Ltd (Company No. 16758357) is the data controller for personal data processed through the My LTD Accounts service. Our registered address is 6 Mallard Way, Dereham, Norfolk NR19 1FJ.

Contact: hello@myltdaccounts.co.uk

2. What Data We Collect

Account data: Name, email address, password (hashed), company name, and billing information.

Financial data: Invoices, expenses, bank transactions, VAT returns, and other accounting records you enter into the Service.

Usage data: Pages visited, features used, browser type, IP address, and device information.

Communication data: Messages sent via our contact form or support channels.

3. Legal Basis for Processing

We process your data under the following legal bases (UK GDPR):

• Contract: To provide the Service you signed up for.
• Legitimate interest: To improve the Service, prevent fraud, and provide support.
• Legal obligation: To comply with tax, accounting, and regulatory requirements.
• Consent: For marketing communications (you can opt out at any time).

4. How We Use Your Data

• To provide, maintain, and improve the Service
• To process payments and manage subscriptions
• To send transactional emails (invoices, receipts, account notifications)
• To provide customer support
• To detect and prevent fraud or abuse
• To comply with legal obligations

5. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase (database hosting) — EU/UK data centres
• Vercel (website hosting) — for serving the application
• Stripe (payments) — for processing subscription payments
• Resend (email) — for sending transactional emails

All sub-processors are GDPR-compliant and process data under appropriate safeguards.

6. Data Retention

We retain your account data for as long as your account is active. Financial records are retained for 7 years after account closure (as required by UK tax law). You may request deletion of non-legally-required data at any time.

7. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a machine-readable format
• Restriction — limit how we process your data
• Objection — object to processing based on legitimate interest
• Withdraw consent — where processing is based on consent

To exercise any right, email hello@myltdaccounts.co.uk. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews.

9. International Transfers

Your data is primarily stored in the UK/EU. Where data is transferred outside the UK, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).

10. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11. Changes

We may update this policy from time to time. We will notify you of material changes by email. The "last updated" date at the top indicates the most recent revision.