Privacy Policy

NVC Comply is operated by New Vantage Co Ltd, a company registered in England and Wales.

We are registered with the Information Commissioner's Office (ICO) as a data processor. ICO registration number: ZC114338.

If you have questions about this policy or how we handle your data, contact us at privacy@nvccomply.co.uk.

We collect the following categories of personal data:

• Account data: email address, name, company name, Companies House number, UTR
• Financial data: bank transaction records you import or connect, categorised as income or expenditure
• Tax data: accounting period details, CT600 figures, director loan balances, capital allowances
• Usage data: pages visited, features used, timestamps of actions taken
• Payment data: Stripe customer ID and subscription status (we never see or store card numbers)

We process your data under the following lawful bases as defined by UK GDPR:

• Contract performance: to provide the filing service you signed up for
• Legal obligation: to maintain records as required by HMRC and Companies House
• Legitimate interests: to improve the service, prevent fraud, and ensure security

We use your data to:

• Generate your CT600 and statutory accounts
• Submit filings to HMRC and Companies House on your instruction
• Categorise transactions using AI (Claude by Anthropic)
• Send you deadline reminders and filing confirmations
• Operate and improve the platform

We do not sell your data. We do not use your financial data to train AI models without your explicit consent.

Transaction categorisation uses the Claude API, operated by Anthropic. Transaction descriptions and amounts are sent to Anthropic's API to generate category suggestions. We do not send personally identifying information (name, UTR, address) to the AI. Anthropic's data processing terms apply to these API calls. See anthropic.com/legal/privacy for details.

All data is stored in the United Kingdom or European Economic Area. We use Supabase for database hosting. Data is encrypted at rest and in transit using AES-256 and TLS 1.3 respectively.

We maintain append-only audit logs of all filing actions for a minimum of six years, as required by HMRC record-keeping obligations.

Access to your data is restricted to employees who need it to provide the service. We conduct regular security reviews.

We share your data only with the following third parties, and only as necessary to provide the service:

• HMRC: your CT600 and statutory accounts, submitted on your instruction
• Companies House: your annual accounts, submitted on your instruction
• Stripe: payment processing (card data never reaches our servers)
• Anthropic: anonymised transaction descriptions for AI categorisation
• Supabase: database and authentication infrastructure
• Resend: transactional email delivery

We do not share your data with advertisers, marketing platforms, or data brokers.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (subject to legal retention obligations)
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, email privacy@nvccomply.co.uk. We will respond within 30 days.

If you are unsatisfied with our response, you may lodge a complaint with the ICO at ico.org.uk.

We retain your account and filing data for the duration of your subscription plus six years after cancellation. This aligns with HMRC's requirement that companies retain corporation tax records for six years from the end of the accounting period.

You may request deletion of data that is not subject to statutory retention requirements at any time.

We use only essential cookies required to keep you logged in and maintain your session. We do not use advertising cookies, tracking cookies, or third-party analytics. No cookie consent banner is required because we only use strictly necessary cookies.

We may update this policy when we add new features or change how we process data. We will notify you by email if we make material changes. The date at the top of this page shows when it was last updated.