Privacy Policy

Draft. This is a starting template and has not yet been reviewed by a solicitor. Confirm the operating entity, contact details and ICO registration before relying on it.

This policy explains how WebFiling ("we", "us"), operated by SmithyForge Ltd, handles your personal data when you use accountswebfiling.co.uk to prepare and file company accounts with Companies House. We are the data controller, registered with the Information Commissioner's Office under registration number 00015456729.

What we collect

• Your email address (to create your account and sign you in).
• The company details and financial figures you enter to prepare accounts.
• Company authentication codes you choose to save (stored encrypted).
• Two-factor authentication data (stored encrypted).
• Records of the accounts you submit and their outcomes.
• Basic technical and log data needed to run and secure the service.

Why we use it, and our lawful basis

• To provide the filing service you ask for — performance of a contract.
• To keep the service and your data secure — our legitimate interests.
• To meet legal and regulatory obligations where they apply.

Who we share it with

We share data only as needed to provide the service, and never sell it:

• Companies House — to file the accounts you choose to submit.
• Mailgun — to send you sign-in links and notifications.
• Stripe — to take subscription payments (we never see your card details).

These providers act as our processors under appropriate agreements.

How long we keep it

We keep your account and filing records while your account is active and as long as needed to meet legal obligations. You can delete drafts at any time and ask us to close your account. Saved authentication codes are encrypted and can be deleted by you at any time.

Security

Data is encrypted in transit (HTTPS). Authentication codes and two-factor secrets are encrypted at rest. Access requires an emailed sign-in link plus a two-factor code. Backups are taken regularly and kept access-restricted.

Your rights

Under UK GDPR you can ask us to access, correct, delete or export your data, and object to or restrict certain processing. To exercise these, or if you have concerns, contact us at privacy@accountswebfiling.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use a single essential cookie to keep you signed in. We do not use advertising or tracking cookies.

Changes

We may update this policy; we'll post any changes on this page.

Last updated: September 2026.