Privacy Policy

The short version

• We only collect what we need to reply to you and to produce your reports.
• Your financial data is used for your reports and nothing else. We never sell it or use it in case studies without your written permission.
• Our website uses no cookies and no advertising trackers.
• You can ask us what we hold about you, or ask us to delete it, at any time.

Who we are

NetReport provides financial reports and analysis for small businesses through netreport.co.uk. We are responsible (the "controller") for the personal data described in this policy.

If you have any questions about how we handle your data, email us at info@netreport.co.uk.

What we collect

When you get in touch. Your name, business name, email address, number of sites, which report you are interested in, and anything you choose to tell us in your message. The same applies if you message us on Instagram, Facebook, LinkedIn or by email.

When you use our service. The files you send us to produce your reports. These are usually bank statement exports, till or sales reports, payroll summaries and exports from accounting software. Some of these files contain personal data about other people, such as staff names and pay in payroll reports, or names of people you have paid. We only use that information to produce your reports.

When you visit our website. Our host, Vercel, keeps standard technical logs (such as IP address, browser type and the pages requested) to run the site securely. We also use Vercel Web Analytics to count visits and see which pages are popular. It does not use cookies and does not identify you personally.

We never ask for logins to your bank, accounting software or any live system, and we never collect payment card details.

How we use it, and why we're allowed to

• To reply to your enquiry and arrange your free report or a call. Our legal basis is taking steps at your request before entering into an agreement, and our legitimate interest in responding to people who contact us.
• To produce your reports and talk them through with you. Our legal basis is performing our agreement with you. For free reports, it is our legitimate interest in providing the service you asked for.
• To keep our website secure and improve it, using anonymous visit statistics. Our legal basis is our legitimate interest in running a working, secure website.
• To keep business records we are required to keep by law. Our legal basis is legal obligation.

We do not send marketing emails unless you have asked us to. We do not use your data for automated decision-making or profiling, and we never sell it.

Who we share it with

We use a small number of trusted services to run NetReport. They only process your data on our instructions:

• Vercel hosts our website and provides privacy-friendly visit statistics.
• Formspree receives contact form submissions and forwards them to our inbox.
• Microsoft 365 provides our email and secure file storage.
• Cloudflare (cdnjs) delivers an animation library used on our homepage, which means it receives your IP address when that page loads.
• Meta (Instagram and Facebook) handles any messages you send us on those platforms, under Meta's own privacy policy. We advertise on these platforms but do not place Meta tracking code on our website or upload customer lists.

We do not share your financial data with anyone else unless you ask us to, or we are required to by law.

Data stored outside the UK

Some of these providers are based in, or store data in, the United States or the EU. Where data leaves the UK, it is protected by UK adequacy regulations (including the UK-US Data Bridge) or by the standard contractual clauses approved for international transfers.

How long we keep it

• Enquiries that don't lead to any work: up to 12 months, then deleted.
• The source files you send us: deleted within 12 months of the end of our work together, or sooner if you ask.
• Reports, agreements and invoices: 6 years after our work ends, because business records must be kept for that long.

How we protect it

Your files are kept in password-protected accounts with two-factor sign-in, and data is encrypted when it is sent and stored. Only the NetReport team working on your account can see your financial data.

Cookies

Our website does not set any cookies, so there is no cookie banner. Our visit statistics are counted without cookies and without identifying you.

Your rights

Under UK data protection law you have the right to:

• see the personal data we hold about you
• ask us to correct anything that is wrong
• ask us to delete your data
• ask us to limit how we use it, or object to how we use it
• receive a copy of your data in a format you can take elsewhere

To use any of these rights, email info@netreport.co.uk. We will reply within one month. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If the change affects how we use data you have already given us, we will tell you directly.