Privacy notice (United Kingdom · UK GDPR & DPA 2018)

vat-refund-tourist-eu ("we", "us") is the controller of the personal data described below. We process personal data in line with the UK GDPR and the Data Protection Act 2018.

Personal data we process

• Account data — name and email when you register.
• Usage data — aggregated, pseudonymous analytics of how the service is used.
• Communications — any messages you send us and related metadata.

Lawful bases

• Consent — for optional analytics and direct marketing.
• Contract — to provide the paid features you subscribe to.
• Legitimate interests — fraud prevention, service integrity, and product improvement, balanced against your rights.

Your rights

Access, rectification, erasure, restriction, objection, portability, and the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

International transfers

Where data leaves the UK we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum as appropriate.

Contact

Privacy contact: [email protected].