Privacy Policy

1. Introduction

TaxStats Ltd ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our identity verification and company filing services through TaxStats ID.

We are registered as an Authorised Corporate Service Provider (ACSP) with Companies House (Registration: AP006589) and are required to verify the identity of company directors and persons with significant control (PSCs) under UK law.

2. Data Controller

3. Information We Collect

We collect information necessary to provide identity verification services:

Personal Information

• Full name and title
• Date of birth
• Residential address
• Email address
• Phone number
• Nationality

Identity Documents

• Passport or driving licence photographs
• Proof of address documents
• Selfie photographs for biometric matching

Company Information

• Company name and registration number
• Company authentication codes
• Director and PSC details

Technical Information

• IP address
• Browser type and version
• Device information
• Cookies and usage data

4. How We Use Your Information

We use your information for the following purposes:

• Identity Verification: To verify your identity as required by Companies House and UK anti-money laundering regulations
• Service Delivery: To process your orders, provide verification services, and file documents with Companies House
• Communication: To send you service updates, verification status notifications, and respond to enquiries
• Legal Compliance: To comply with our obligations under the Economic Crime and Corporate Transparency Act 2023
• Fraud Prevention: To detect and prevent fraudulent activity
• Service Improvement: To improve our services and user experience

5. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: Processing necessary to perform our contract with you for verification services
• Legal Obligation: Processing required to comply with UK law, including anti-money laundering regulations and Companies House requirements
• Legitimate Interests: Processing for fraud prevention and service improvement
• Consent: Where you have given consent for specific processing activities — for example, marketing communications, or introducing you to a banking partner to open a business bank account

6. Data Sharing

We may share your information with:

• Companies House: To submit verification and filing information as required by law
• Stripe: Our payment processor, to handle secure payments and identity verification
• Identity Verification Providers: Third-party services that assist with document and biometric verification
• Banking partners (business bank account introductions): If you ask us to introduce you to a bank to open a business bank account (for example, Metro Bank), and only with your explicit consent, we share a limited set of your details with that bank so it can assess and open the account — the names, dates of birth, nationality, country of residence and contact details of the company's directors and any 25%-or-greater beneficial owners, the company's details, the result of your identity verification, and your proof-of-address documents. We do not share your identity-document image. The bank uses this information as an independent controller for its own account-opening and anti-money laundering obligations. You can withdraw your consent at any time before the introduction is made, and declining does not affect our other services to you.
• Professional Advisers: Lawyers, accountants, and auditors where necessary
• Law Enforcement: Where required by law or to prevent crime

We do not sell your personal information to third parties.

7. Data Retention

We retain your personal data for the following periods:

• Identity verification records: 7 years from completion of the verification, as required of Authorised Corporate Service Providers by Companies House. The anti-money laundering regulations require 5 years for customer due diligence; both duties apply to these records and we keep them for the longer period
• Company filing records: 7 years from the date of filing
• Payment records: 7 years for tax and accounting purposes
• Banking introduction records: 5 years, in line with the anti-money laundering retention period above
• Marketing preferences: Until you withdraw consent

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit and at rest
• Secure access controls and authentication
• Regular security assessments and updates
• Staff training on data protection
• Secure data centres with physical security measures

9. Your Rights

Under UK GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Restriction: Request limitation of processing
• Portability: Request transfer of your data to another provider
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us at info@taxstats.co.uk. We will respond within one month.

10. Cookies

We use cookies and similar technologies to improve your experience. These include:

• Essential cookies: Required for the website to function properly. These are always on and need no consent.
• Analytics cookies: Help us understand how visitors use our site (Google Analytics).
• Advertising cookies: Let us measure and improve our advertising (Google Ads, Microsoft Advertising / UET, and TikTok).
• Preference cookies: Remember your settings and preferences.

When you first visit, non-essential analytics and advertising cookies are off by default. We only set them after you choose "Accept all" on our cookie banner, and we send your choice to Google (Consent Mode) and Microsoft (UET consent mode) so their tags respect it. You can change or withdraw your consent at any time using the "Cookie Settings" link in the footer, or through your browser settings.

11. International Transfers

Your data is primarily processed within the UK and European Economic Area. Where we transfer data outside these regions, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. The date at the top of this policy indicates when it was last updated.

13. Complaints

If you have concerns about how we handle your personal data, please contact us first at info@taxstats.co.uk. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):