Privacy Policy

Last updated: July 2026

AES-256 Encryption

All transaction records and document files are encrypted at rest with military-grade protocols.

Zero Data Sharing

We do not sell, license, or share your financial data or scanned documents with third parties.

30-Day Auto-Delete

Uploaded tax files are processed on-the-fly and automatically deleted from our systems after 30 days.

1. Information We Collect

To perform tax rebate audits and pre-fill claim forms, Reclaimly collects the following categories of information when you upload P60s, P45s, or P2 Notices:

  • Identity Details: Full Name, National Insurance (NI) Number, and home address.
  • Taxpayer Details: Employer Name, PAYE Employer Reference, and tax years audited.
  • Financial Figures: Total Pay, Tax Deducted, pension income indicators, and other declared taxable income.
  • Account Credentials: Name and email address when registering a Reclaimly account to access audits.

2. How We Use and Process Your Documents

Your uploaded documents are parsed dynamically using highly secure Optical Character Recognition (OCR) pipelines hosted entirely on isolated Google Cloud Platform (GCP) instances.

  • Documents are scanned immediately upon upload. The structured fields are fed directly into our local calculation matrix.
  • The raw PDF/image files are strictly stored in an encrypted cloud bucket with a hardcoded lifecycle policy that triggers automatic deletion after 30 days.
  • This data is used solely to calculate tax overcharges and format R40/P50 claim documents. We do not use your financial data for training models, analytics, or profiling.

3. Data Security and Encryption

We execute leading-edge security measures to ensure your data stays secure. All communication between your browser and our servers is encrypted in transit using Transport Layer Security (TLS 1.3/HTTPS). Once stored, all database records and claim packets are encrypted at rest using AES-256 keys managed by GCP Key Management Service.

4. Cookies and Sessions

We use strictly necessary cookies to keep you securely signed in to your portal. These cookies do not track your behavior across other sites or compile marketing profiles. We do not integrate third-party ad networks or tracking pixels.

5. Data Retention and Your Deletion Rights

Under GDPR rules, you have full control over your data. You may request immediate deletion of your entire Reclaimly account, search history, and generated PDFs by visiting your Settings page or contacting support. Otherwise, all generated PDFs are purged automatically 30 days after creation.

6. Contact Privacy Officer

If you have any questions about this Privacy Policy or how we handle your financial information, please email privacy@reclaimly.co.uk.