1. Controller
Strival Limited, trading as Flexal is the controller of personal data used by trackmydeadlines. We are registered in England and Wales under company number 13167388. Our registered office is 66 Paul Street, London, England, EC2A 4NA.
For privacy questions or requests, contact hello@flexal.co.uk.
2. Personal data we collect
We collect and use the following types of data:
- account data, including your email address and account settings;
- company data you add, including company number, company name, VAT settings, and deadline information;
- deadline data, including due dates and completion status;
- authentication data, including temporary magic-link tokens, session information, and security records;
- marketing preference data, including whether you opted in to Flexal accounting service emails, the wording shown to you, when you opted in, and when you opted out;
- reminder data, including which reminders were sent, when they were sent, and whether an email provider reported an error; and
- technical data, such as IP address, request metadata, logs, and information needed to secure and operate the service.
3. Where data comes from
Most account and deadline data comes from you. When you add or search for a company, we use Companies House data to retrieve public company information and derive relevant deadlines.
4. How we use personal data
We use personal data to:
- create and manage your account;
- sign you in using magic-link authentication;
- show company and deadline information in your dashboard;
- send deadline reminders and sign-in emails;
- send occasional emails about Flexal accounting services where you have opted in, and record opt-outs;
- save your reminder preferences, including whether reminders are paused;
- maintain, debug, protect, and improve the service;
- prevent misuse, rate-limit requests, and investigate errors; and
- comply with legal obligations.
5. Lawful bases
We rely on these lawful bases under UK GDPR:
- contract: to provide the account, dashboard, reminders, and related service features you request;
- legitimate interests: to secure, maintain, troubleshoot, and improve the service, and to prevent misuse;
- legal obligation: where we need to keep or disclose information to comply with law; and
- consent: where we ask for consent for an optional use of data. You can withdraw consent at any time, including for Flexal accounting service marketing emails.
6. Service providers
We use trusted service providers to run the service. They process data for us only as needed to provide their services.
- Vercel, for hosting, deployment, logs, and scheduled jobs;
- Neon, for hosted Postgres database services;
- Resend, for sending sign-in and reminder emails; and
- Companies House, for public company search and profile data.
We do not sell your personal data. We do not use your data for third party advertising.
7. International transfers
Some service providers may process personal data outside the UK. Where this happens, we rely on appropriate safeguards such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or other lawful transfer mechanisms.
8. Cookies and similar technologies
We use essential cookies or similar storage only where needed to sign you in, keep your session active, protect the service, and remember necessary settings. We do not currently use advertising cookies.
9. Retention
We keep account, company, deadline, and reminder data while your account is active. If you ask us to close your account, we will delete or anonymise personal data unless we need to keep it for legal, security, accounting, or dispute-resolution reasons.
Temporary login tokens expire quickly and are kept only for security and authentication purposes. Logs and rate-limit records are kept for a limited period needed to run and protect the service.
10. Security
We use technical and organisational measures designed to protect personal data, including magic-link authentication, token hashing, rate-limiting, access controls, hosted database security, and encrypted connections where appropriate.
No online service can be completely secure. You should keep your email account secure because it is used to access your account.
11. Your rights
Under UK data protection law, you may have the right to access, correct, delete, restrict, or object to the use of your personal data. You may also have the right to data portability and to withdraw consent where processing is based on consent.
To exercise your rights, contact hello@flexal.co.uk. We may need to verify your identity before responding.
12. Complaints
We would prefer to resolve privacy concerns directly. You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.
13. Children
The service is intended for company directors and business users. It is not intended for children.
14. Marketing emails
We only send optional emails about Flexal accounting services where you have asked to receive them. You can opt out in your account settings or by using any unsubscribe method included in a marketing email.
We keep a record of marketing consent and opt-out choices so that we can respect your preferences.
15. Changes to this policy
We may update this privacy policy from time to time. The latest version will be posted on this page with the date above. If a change is material, we will take reasonable steps to tell account holders.