At FileSimple, we are committed to protecting the privacy and security of your personal and business data. This Privacy Policy explains how we collect, use, and safeguard the information you provide when using our platform to prepare and submit micro-entity accounts to Companies House.

To process your filings, we collect and process the following information:

• Company Information: Company number, company name, director name, and balance sheet financial figures.
• Contact Details: Your email address for sending confirmation, status updates, secure magic links, and reminders.
• Authentication Details: Your Companies House presenter credentials or company authentication codes (used strictly to authorize the filing and never stored permanently).

We use your data solely to compile, validate, and transmit your company's micro-entity accounts to the UK Companies House registry. We do not use your financial data for marketing, profile building, or any other commercial purposes.

All communication between your browser and our servers is encrypted using industry-standard TLS encryption. Payment processing is handled securely via Stripe, and we never store your payment card details on our servers. Company authentication codes are processed in memory to sign transmissions and are not stored in our databases.

We retain your personal data and filing information only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. In general, we keep filing records for 6 years to comply with tax and company law requirements.

We transmit your data to the following third-party processors:

• Stripe: For handling card payments and merchant transactions.
• Companies House API / XML Gateway: To submit your official accounts filings.
• Resend: For sending emails, notifications, and magic links.
• Google Analytics: To analyze website traffic and usage patterns (this data is anonymized).

We use strictly necessary cookies to ensure the basic functionality of our website, such as maintaining your session and preventing cross-site request forgery (CSRF) attacks. We also use analytical cookies via Google Analytics to help us understand how visitors interact with our website. These analytical cookies collect information anonymously and report website trends without identifying individual visitors.

Under the UK GDPR, you have the right to access, rectify, or request the deletion of any personal data we hold about you. Since all filings submitted to Companies House become part of the public register, any requests to modify public filings must be directed to Companies House.

If you have any questions about this Privacy Policy or how we handle your data, please contact us.