Privacy Policy

1. Data Controller

This website is operated by Asmaa Jaber, Entrepreneur Individuel (sole proprietorship), registered in France.

• SIREN: 833 055 627
• Registered address: 3 rue Micheline Ostermeyer, 93200 Saint-Denis, France
• Email: contact@vatthreshold.uk
• VAT number: FR 14 833055627

2. Data We Collect

We collect and process the following personal data:

| Data | Purpose | Legal basis | | ----------------------- | ------------------------------------------------ | ----------------------- | | Email address | Account creation and authentication (magic link) | Performance of contract | | Payment information | Processing purchases via Stripe | Performance of contract | | Usage data | Site analytics and improvement | Legitimate interest |

We do not collect or store passwords. Authentication is handled via one-time magic links sent to your email.

3. Payment Processing

All payments are processed by Stripe, Inc. When you make a purchase, Stripe collects and processes your payment details directly. We do not have access to your full payment card information.

Stripe's privacy policy: stripe.com/privacy

4. Hosting and Sub-processors

| Service | Purpose | Location | | ----------------- | --------------------------- | ---------------------------- | | Vercel Inc. | Website hosting | USA (EU-adequate safeguards) | | Supabase Inc. | Authentication and database | USA (EU-adequate safeguards) | | Stripe, Inc. | Payment processing | USA (EU-adequate safeguards) |

5. Data Retention

• Account data (email): retained for as long as your account is active, or until you request deletion.
• Transaction records: retained for the period required by applicable tax and accounting regulations (typically 10 years under French law).
• Usage data: anonymised or deleted after 26 months.

6. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability: receive your data in a structured format
• Object to processing based on legitimate interest
• Withdraw consent at any time, where consent is the legal basis

To exercise any of these rights, email us at contact@vatthreshold.uk. We will respond within 30 days.

You also have the right to lodge a complaint with:

• CNIL (France): https://www.cnil.fr
• ICO (United Kingdom): https://ico.org.uk

7. Cookies

This site uses only strictly necessary cookies for authentication and session management. No advertising or tracking cookies are used.

8. International Transfers

Some of our sub-processors are located outside the European Economic Area (EEA). Where this is the case, we ensure that appropriate safeguards are in place (Standard Contractual Clauses or equivalent mechanisms).

9. Changes to This Policy

We may update this privacy policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance.

10. Contact

For any questions about this privacy policy or your personal data:

Email: contact@vatthreshold.uk