Privacy Policy

Last updated: 3 July 2026

1. Who we are

GetFiled is operated by Paperless App Ltd, registered in England and Wales. We are the data controller for personal data processed through this service.

Contact: hello@getfiled.co.uk

2. What data we collect

We collect the following categories of personal data:

• Account data: your email address and name, provided when you sign up.
• Company data: the Companies House numbers of companies you choose to track. This is public information held by Companies House.
• Usage data: pages visited, actions taken, and standard server logs (IP address, browser type, timestamps). This is collected automatically as part of normal web server operation.
• Free company-check data: our free company lookup can be used without an account. When you run a check we record a minimal event to measure how the tool is used: the timestamp, the public company number you looked up, a one-way salted hash of your IP address (never the IP address itself), your anonymous session identifier, and whether you clicked through to sign up. We do not collect your name, email, or any other identifying detail for anonymous checks, and we do not create an account or company record from them.
• Payment data: payment processing is handled entirely by Paddle, our Merchant of Record. We do not store your card details or other payment information. Paddle is an independent data controller for payment data. See Paddle's privacy policy at paddle.com/legal/privacy.

3. How we use your data

We use your data to:

• Provide the GetFiled service by fetching and displaying your companies' compliance status from Companies House.
• Send you compliance reminder emails ahead of filing deadlines (the core product feature you signed up for).
• Send transactional emails such as account confirmation and password resets.

We do not sell your data to third parties. We do not use your data for advertising.

4. Legal basis for processing (GDPR Article 6)

We process your personal data on the following legal bases:

• Contract performance (Article 6(1)(b)): processing your account and company data is necessary to deliver the service you signed up for.
• Legitimate interests (Article 6(1)(f)): sending compliance reminder emails and usage logging, where these are consistent with the purpose for which you signed up and do not override your rights.
• Legal obligation (Article 6(1)(c)): retaining records as required by applicable law.

5. Third parties we share data with

We share data with the following third parties only as necessary to provide the service:

• Companies House: we query the Companies House public API on your behalf. No personal data is transmitted to Companies House.
• Paddle: our Merchant of Record, who handles payment processing and billing. Paddle processes payment data as an independent data controller. See their privacy policy at paddle.com/legal/privacy.
• Resend: transactional email delivery. Your email address is shared with Resend solely to deliver emails from GetFiled to you.
• Render: cloud hosting provider. Your data is stored on Render's infrastructure in the EU/UK region.

We do not share your data with any other third parties.

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will retain your data for a further 90 days before permanent deletion, to allow for account recovery and to meet any legal obligations.

You can request deletion of your data at any time by emailing hello@getfiled.co.uk.

7. Your rights under GDPR

As a data subject under UK GDPR, you have the following rights:

• Right of access: to obtain a copy of your personal data.
• Right to rectification: to correct inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: to ask us to limit how we use your data.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests.

To exercise any of these rights, email hello@getfiled.co.uk. We will respond within 30 days.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use a single session cookie to keep you logged in while you use GetFiled. This is a strictly necessary cookie; it is required for the service to function and does not require your consent under UK GDPR.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Changes to this policy

We will notify you by email of any material changes to this Privacy Policy before they take effect.

10. Contact

For any privacy-related questions or to exercise your rights:

Email: hello@getfiled.co.uk

Paperless App Ltd, registered in England and Wales.