Privacy Policy

1. Who we are

The data controller for the personal data described in this policy is THE REVENUE HOUSE LIMITED, a company registered in Northern Ireland under Company No. NI740029.

Registered office: 264 Albertbridge Road, Belfast, Northern Ireland, BT5 4GW.
Contact for all privacy matters: enquiries@therevenuehouse.uk.

We are not currently required to appoint a Data Protection Officer (DPO). Our privacy contact for all questions, requests and concerns is the email address above.

2. Scope of this policy

This policy explains how we collect, use, share and protect personal data in connection with:

this website, https://therevenuehouse.uk, including email correspondence you send us from it; and
the mobile applications published by THE REVENUE HOUSE LIMITED on the Apple App Store and Google Play (together, the “apps”), including any client-portal or KPI-tracking companion app we release.

Where a specific app collects data in a way that differs from this policy, we will say so clearly in that app and, where required, in an app-specific privacy notice. This policy is the baseline for all of our apps.

3. Information we collect on the website

3.1 Correspondence you send us

The website contains no contact forms. If you email us (for example at enquiries@therevenuehouse.uk), we receive your email address, the content of your message, and any information you choose to include, such as your name, company and attachments. We use this to reply to you and to carry on the conversation you started.

3.2 Technical and server logs

The website is hosted and delivered by our hosting provider, Cloudflare. In the course of delivering the site securely, Cloudflare processes technical data about each request, including your IP address, user-agent string (browser and device type) and request data (pages requested, timestamps, referring page). This processing exists to deliver the site to you and to protect it against abuse, bots and attacks.

3.3 No analytics or advertising cookies

The website itself sets no analytics cookies and no advertising cookies, and includes no third-party trackers. See our Cookie Policy for the strictly-necessary cookies that Cloudflare's security layer may set.

4. Information we collect in our apps

Different apps collect different data, and many features below only apply if the app in question offers them. This section describes the full range of what our apps may collect.

4.1 Account information

Only if an app offers user accounts: your email address and a display name you choose. We use these to create and secure your account, sign you in, and communicate with you about the service. Apps that work without an account collect no account information.

4.2 User content created in the app

Content you create in an app — for example notes, records, KPI entries or configuration — is stored on your device. If the app offers synchronisation or a client-portal function and you enable it, that content is also stored on our servers so it can be synchronised across your devices or shared with people you authorise. User content remains yours; we process it only to provide the app's features.

4.3 Device and technical data

Device model, operating-system version, app version, language setting, crash state, and a non-advertising install identifier (a random identifier scoped to the app installation, used to distinguish installs — not to advertise to you or track you across apps).

4.4 Usage analytics (if enabled)

Where an app has analytics enabled, we collect aggregated feature-usage events (for example, “export used”, “dashboard opened”) to understand which features matter and improve the app. We do not use advertising identifiers and do not build advertising profiles.

4.5 Crash and diagnostics reports

If an app crashes or malfunctions, a diagnostic report may be generated containing the technical state of the app at the time (stack trace, device model, OS version, app version). We use these solely to find and fix defects.

4.6 App permissions

Our apps request only the system permissions their features require. Every permission is optional: the app will function without it (the specific feature aside), and you can grant or revoke any permission at any time in your device's system settings. Permissions an app may request include:

Permission	Purpose	Optional?
Notifications	To alert you to updates you have asked for, such as KPI threshold alerts or sync completion.	Yes — revocable in system settings.
Network access	To synchronise data and check for updates where sync features are used.	Granted by the OS; sync features are themselves optional.
Camera / photo library (only in apps with document or image features)	To let you attach an image or document you choose. Accessed only at the moment you use the feature.	Yes — revocable in system settings.

4.7 What we do NOT do

We do not sell personal data.
We do not include advertising SDKs in our apps.
We do not track you across other companies' apps or websites.
We do not collect precise location data.

5. Purposes and lawful bases

Under the UK GDPR, we rely on the following lawful bases for each purpose of processing:

Purpose	Data categories	Lawful basis
Responding to your enquiries and correspondence	Email address, message content, anything you include	Legitimate interests (responding to people who contact us); performance of a contract where the correspondence relates to entering or performing one
Providing consulting and software services to clients	Contact details, correspondence, contractual records	Performance of a contract
Delivering the website securely	IP address, user agent, request logs	Legitimate interests (site security, abuse prevention, reliable delivery)
Providing app features, including accounts and sync	Account information, user content, device data	Performance of a contract (the app's terms of use)
Fixing crashes and defects	Crash and diagnostics reports, device data	Legitimate interests (maintaining a working, safe product)
Understanding aggregate feature usage (only if analytics enabled)	Aggregated usage events, device data	Consent, where required; otherwise legitimate interests (product improvement)
Sending optional notifications	Notification token, notification preferences	Consent (the system permission you grant)
Keeping accounting and tax records	Invoicing and transaction records	Legal obligation

We share personal data only with service providers acting under contract on our behalf, and only what each needs:

Cloudflare, Inc. — website hosting, content delivery and security. Cloudflare processes request data (IP address, user agent, request metadata) to deliver and protect the site.
Apple Inc. and Google LLC — distribution of our apps through the Apple App Store and Google Play and, where used, in-app purchase billing. For the purchase transaction itself, Apple and Google act under their own privacy policies; we do not receive your payment card details.
Crash-reporting or analytics tooling — only where enabled in a given app, we may use a third-party crash-reporting or analytics service to process the diagnostics and aggregated usage data described in section 4. We choose providers that operate under data-processing agreements, and we commit to keeping this section current with the specific tooling in use as our apps ship.

We do not sell or rent personal data to anyone. We may disclose personal data where required by law, court order or a competent authority, or where necessary to establish, exercise or defend legal claims.

7. International transfers

Some of our service providers process data outside the United Kingdom — for example, Cloudflare operates a global network. Where personal data is transferred outside the UK, we rely on one or more of the following safeguards:

UK adequacy regulations covering the destination country;
the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses; or
standard contractual clauses with supplementary measures where appropriate.

8. How long we keep data

Email correspondence — kept for up to 24 months after our last contact with you, then deleted, unless it forms part of a client contract record we must keep longer.
Server and security logs — retained by Cloudflare on its short rolling retention schedule as part of delivering and securing the site; we do not extend it.
App account data — kept for as long as your account exists, and deleted within 30 days of account deletion.
Crash and diagnostics data — retained for 90 days, then deleted.
Backups — purged on a rolling 30-day cycle, so deleted data leaves backups within 30 days of deletion.
Accounting and tax records (e.g. invoices) — kept for the periods required by UK law, typically six years.

9. Your rights

Under the UK GDPR you have the following rights over your personal data:

Access — to ask whether we hold personal data about you and to receive a copy of it.
Rectification — to have inaccurate data corrected and incomplete data completed.
Erasure — to have your data deleted where there is no overriding reason for us to keep it.
Restriction — to have processing paused while a dispute about the data or its use is resolved.
Portability — to receive data you provided to us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
Objection — to object to processing based on legitimate interests, and to any direct marketing (we currently send none).
Withdrawal of consent — where processing is based on consent (for example optional notifications or analytics), to withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
Rights relating to automated decision-making — we do not make any solely-automated decisions about you that produce legal or similarly significant effects. If that ever changed, you would have the right to human review.

To exercise any right, email enquiries@therevenuehouse.uk. We will respond within one month of receiving your request (extendable by up to two further months for complex requests, in which case we will tell you). We may ask you to verify your identity — for example by replying from the email address we hold for you — before acting on a request, to protect your data from impersonation.

10. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Telephone: 0303 123 1113
Website: https://ico.org.uk/

We would welcome the chance to address your concern first — please contact us at enquiries@therevenuehouse.uk before going to the ICO, though you are under no obligation to do so.

11. Children

Our website and apps are not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe a child has provided us with personal data, contact enquiries@therevenuehouse.uk and we will delete it. The age ratings assigned to our apps in the Apple App Store and Google Play apply.

12. Account and data deletion

You can delete your account and associated data in either of two ways:

In the app — once our apps ship with accounts, the deletion path will be Settings → Account → Delete account. This deletes your account and the data associated with it.
By email — send a request to enquiries@therevenuehouse.uk with the subject line “Account deletion request” from the email address linked to your account. This route works even if you can no longer access the app.

Deletion is completed within 30 days of the request. After deletion, a minimal set of records may be retained where the law requires it — for example, invoices and transaction records kept for tax law, or records needed to establish, exercise or defend legal claims — and only for as long as those obligations last. Deleted data leaves backups on the rolling 30-day backup cycle described in section 8.

13. iOS App Tracking Transparency

Our apps do not track you across other companies' apps or websites, and do not share your data with data brokers. Because there is no tracking as defined by Apple's App Tracking Transparency (ATT) framework, our apps do not show an ATT permission prompt. If this ever changed, we would request your consent first through the ATT framework before any tracking occurred, and update this policy.

14. Google Play Data Safety

For each app we publish on Google Play, we complete the Play Data Safety form, and we commit that those declarations mirror this policy: the data types, purposes, sharing and deletion practices declared in Play will match what is described here. If a specific app's practices differ, the difference will be stated both in its Data Safety declaration and in this policy or an app-specific notice.

15. Security

We protect personal data with measures appropriate to its sensitivity, including:

Encryption in transit — TLS for all connections to our website and services;
Encryption at rest where applicable to stored data on our servers;
Least-privilege access — access to personal data is limited to those who need it for a stated purpose;
Breach response — in the event of a personal-data breach we will act in accordance with UK GDPR Articles 33 and 34, notifying the ICO within 72 hours where required and informing affected individuals without undue delay where the breach is likely to result in a high risk to them.

16. Changes to this policy

When we change this policy, we will publish the updated version at this address and revise the “last updated” date at the top. For material changes affecting app users — for example a new category of data collection — we will additionally give notice in the affected app or by email to account holders before the change takes effect. We maintain the discipline that the effective date shown always reflects the current version.

17. Contact

Questions, requests or concerns about this policy or your personal data:

Email: enquiries@therevenuehouse.uk

THE REVENUE HOUSE LIMITED
264 Albertbridge Road
Belfast, Northern Ireland
BT5 4GW
United Kingdom