Privacy Policy

This Privacy Policy explains how InvoiceSorted collects, uses, and protects your personal data. InvoiceSorted is the data controller for any personal data you provide to us. We are not a law firm and nothing in this policy or elsewhere on this site constitutes legal advice. If you have questions about your data, contact us at privacy@invoice-sorted.co.uk.

Our registered office is at [Registered office address]. We handle your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Note: This policy is a reasonable conservative template. We recommend you obtain independent professional or legal review before relying on it in a dispute.

1. Who we are

InvoiceSorted is a document-preparation and guidance service for UK businesses pursuing unpaid invoices through the England and Wales small claims process. We are not a law firm, we are not regulated by the Solicitors Regulation Authority, and we are not affiliated with any law firm.

Data controller: InvoiceSorted, [Registered office address]. Contact: privacy@invoice-sorted.co.uk.

2. What personal data we collect

We may collect and process the following categories of personal data:

Identity and contact data: your name, business name, and work email address, as provided when you submit a case check, including any documents you choose to upload.

Case data: information about the debt you are pursuing, including the name and contact details of the person or business that owes you money, the amount and date of the invoice, and any invoices, contracts, or correspondence you choose to upload as part of your case.

Technical and usage data: IP address, browser type, pages visited, and session data, collected automatically when you use our site.

3. How we use your data and our lawful bases

To provide the service and prepare your documents (lawful basis: performance of a contract with you). We use your identity, contact, and case data to produce the documents and guidance you have asked for.

To run your free case check and contact you about it (lawful basis: consent). If you submit a case check, we may follow up by email. You may withdraw your consent at any time by contacting us.

To secure and improve the service (lawful basis: legitimate interests). We use technical and usage data to maintain the security of the site and to understand how it is used, so that we can improve it. We have balanced these interests against your rights and do not consider them to override those rights.

4. Sharing your data

We do not sell your personal data to third parties. We may share your data with:

Data processors: trusted third-party companies that provide hosting, email delivery, and similar services on our behalf. They process your data only on our instructions and under appropriate data-processing agreements.

Legal or regulatory disclosure: we may disclose your data if required by law, by a court order, or by a regulatory authority.

5. International transfers

Where we transfer personal data outside the UK, we ensure that appropriate safeguards are in place, such as the UK International Data Transfer Agreement or equivalent mechanisms, as required by UK GDPR.

6. Retention

We retain your personal data only for as long as is necessary for the purpose for which it was collected, including to meet legal, accounting, or reporting obligations. When data is no longer needed, we delete or anonymise it. You may request deletion of your data at any time (see Your Rights below).

7. Your rights under UK GDPR

Under UK GDPR, you have the following rights:

Access: to obtain a copy of the personal data we hold about you.
Rectification: to ask us to correct inaccurate or incomplete data.
Erasure: to ask us to delete your data in certain circumstances.
Restriction: to ask us to restrict how we use your data in certain circumstances.
Portability: to receive your data in a structured, machine-readable format.
Objection: to object to processing carried out on the basis of our legitimate interests.
Withdraw consent: where processing is based on consent, to withdraw it at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, email privacy@invoice-sorted.co.uk. We will respond within one month, or tell you if we need more time.

8. Cookies

We use cookies on this site. For full details, please see our Cookie Policy.

9. Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No system is perfectly secure; if you have concerns about the security of your data, contact us immediately.

10. Complaints

If you are unhappy with how we handle your personal data, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority: ico.org.uk.

11. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with a new "Last updated" date. For significant changes, we may also notify you by email.