Privacy notice — placeholder

VATLY is in a pre-launch holding period. The only personal data we currently process is the email address you give us if you join the waitlist on the home page.

While we are pre-launch

• Controller: VATLY Ltd (pending UK incorporation).
• Lawful basis: consent (waitlist).
• Data collected: your email address and the timestamp and copy of the consent text you agreed to.
• Purpose: to email you when VATLY launches, and the occasional product update.
• Retention: three years from your last engagement, or immediately when you ask us to remove you.
• Subprocessors: Cloudflare (hosting + database) and, once enabled, Resend (transactional email).
• Your rights: access, rectification, erasure, portability, restriction, objection, and complaint to the UK ICO.

The full notice

The complete, solicitor-reviewed privacy notice — covering the SaaS app (app.vatly.uk), our subprocessor chain, your DSAR rights, and our 6-year HMRC record-retention obligation for VAT calculations — will be published at the same time as the product opens. The governance policy that drives that document already exists in the codebase under docs/GDPR_SCAFFOLDING.md.

Until then, if you have any privacy concern or want your waitlist entry deleted, write to privacy@vatly.uk.