Privacy notice

The short version

• You can read the whole site without giving us any personal data.
• We do not use advertising cookies, tracking pixels or cross-site tracking, and we do not sell data.
• If you subscribe to the newsletter we keep your email address, only after you confirm it, until you unsubscribe.

Who we are

einvoices.uk is the data controller for personal data collected through this website. You can contact us about anything in this notice at hello@einvoices.uk.

The weekly newsletter

When you sign up for our weekly newsletter we collect your email address. We use double opt-in: we send one email asking you to confirm, and we only add you to the mailing list after you click the confirmation link (it expires after 48 hours). If you do not confirm, you are not added.

• Purpose: sending the newsletter and occasional service messages about it.
• Lawful basis: your consent (UK GDPR Article 6(1)(a)). You can withdraw it at any time with the unsubscribe link in every email.
• Processor: emails are sent and the list is stored by Resend, our email provider. Resend may process data outside the UK; where it does, transfers rely on the safeguards in Resend's data processing terms.
• Retention: until you unsubscribe or ask us to delete your data. After you unsubscribe we may keep your address on a suppression list so that we do not email you again by mistake.

Website hosting and security

Like any website, our hosting provider (Vercel) receives technical information when you visit, such as your IP address, browser type and the pages requested, and keeps it in short-lived server logs. We use IP addresses briefly, in memory, to limit abuse of the sign-up form and tools. Our lawful basis is legitimate interests (Article 6(1)(f)): keeping the site secure and working.

Analytics

We do not currently use analytics. If we add them, we will use a cookieless, privacy-friendly service that does not track you across sites or build a profile of you, and we will update this notice first.

Cookies

We do not set advertising or analytics cookies. If that ever changes we will ask for your consent first, as the law requires.

Our tools

• The e-invoice viewer and most other tools run in your browser; what you enter is not sent to us.
• The e-invoice validator sends the XML you submit, through our server, to the free public Peppol validation service at peppol.helger.com, and shows you the result. We do not store the file. Do not upload invoices containing personal data you are not allowed to share.
• The Peppol Directory lookup sends your search term to the public Peppol Directory and shows the results. We do not store your searches.

The chat assistant

The "Ask a question" assistant sends your questions, and the conversation so far, to Anthropic (the maker of the Claude AI models) to generate an answer. It may search the web to answer. We do not store conversations on our servers; your browser keeps the current conversation in session storage until you close the tab. Please do not enter personal or confidential information. Anthropic processes the data under its commercial terms and does not use it to train models by default. To limit abuse we briefly hold your IP address in memory to count requests.

If you email us

We use what you send only to deal with your message, and delete it when it is no longer needed, normally within two years. Our lawful basis is legitimate interests.

Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct or delete it;
• ask us to restrict how we use it, or object to our use of it;
• receive the data you gave us in a portable format;
• withdraw your consent at any time, for example by unsubscribing.

To use any of these rights, email hello@einvoices.uk. We will reply within one month. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office.