Privacy Policy

1. Introduction

DE VALLE LTD ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our cloud accounting automation platform and website (collectively, the "Service").

We are a UK-based company registered in England and Wales. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name, email address, phone number, and postal address
• Business information (company name, registration number, VAT number)
• Payment and billing information
• Account credentials and authentication data
• Financial data and accounting records you upload to our Service

2.2 Automatically Collected Information

When you use our Service, we automatically collect:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Log files and error reports
• Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our accounting automation platform
• Account Management: To create and manage your account, process payments, and send service-related communications
• Customer Support: To respond to your inquiries, provide technical support, and resolve issues
• Legal Compliance: To comply with UK tax laws, HMRC requirements, and other legal obligations
• Security: To protect against fraud, unauthorized access, and security threats
• Analytics: To analyze usage patterns and improve our Service
• Marketing: To send you promotional materials (with your consent) and inform you about new features

4. Legal Basis for Processing

Under UK GDPR, we process your personal data based on:

• Contract: To fulfill our contractual obligations to provide the Service
• Legal Obligation: To comply with UK tax and accounting regulations
• Legitimate Interest: To improve our Service, prevent fraud, and ensure security
• Consent: For marketing communications and non-essential cookies

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who help us operate our Service (hosting, payment processing, analytics)
• HMRC and Tax Authorities: When required by UK law for tax compliance
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (SSL/TLS) and at rest
• Secure authentication and access controls
• Regular security audits and monitoring
• Compliance with ISO 27001 and UK data protection standards

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing communications

To exercise these rights, please contact us using the information provided below.

8. Data Retention

We retain your personal data for as long as necessary to:

• Provide our Service to you
• Comply with legal obligations (UK tax records must be kept for 6 years)
• Resolve disputes and enforce agreements

When you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it by law.

9. International Data Transfers

Your data is primarily stored and processed in the United Kingdom. If we transfer data outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office (ICO).

10. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe we have not handled your personal data in accordance with UK GDPR. Visit ico.org.uk for more information.