Privacy and data handling

Who operates QuarterReturn

Operating legal entity/controller name and contact address: [QuarterReturn operating legal entity/controller name and contact address]. For privacy or data requests, contact: [privacy/data-request contact].

Information the current app receives

• Waitlist: the email address you submit. The app saves a waitlist entry and attempts to record the submission in the company’s Polsia inbox; if that is not recorded, it sends a company-inbox notification. The waitlist is intended to send early-access updates. The final purpose, lawful basis, unsubscribe method and retention period are [to be confirmed by the owner and counsel].
• Assisted-service requests: depending on the path, your name, email, optional phone number, trade or property details, reporting period, requested support and free-text context. Submitted answers and a snapshot of the form are saved with a request record and are available through the app’s administrator review flow. The app sends a notification containing the request reference and form title; full answers remain in the request record. Required versus optional fields and the lawful basis for each use are [to be confirmed by the owner and counsel].
• Accounts and sessions: account details such as name, email, email-verification state and account credentials, along with session identifiers, expiry and related session data. The configured account model can also store IP address and browser user-agent fields. Exact purposes, retention, access and deletion processes are [to be confirmed].
• Previously saved records: files uploaded before new collection was paused, together with details such as filename, document type, file size, content type, business/property tag, reporting-period dates, category, storage key and the storage URL returned by the file-storage service. The signed-in records API filters list results to the account owner. The access controls on the stored file URLs, file-storage provider, storage location and deletion process are [to be confirmed]. New tax-document uploads are currently unavailable. Do not send documents or sensitive records through the assisted-service form.
• Conditional analytics: if enabled by deployment configuration, the app creates or reuses a browser-localpolsia_vid identifier and requests a page-view pixel from Polsia. Whether this beacon is enabled, what the service retains, and any opt-out or consent treatment are [to be confirmed by the owner and platform].

Details that still need confirmation

• [Purposes and lawful basis for each processing activity.]
• [Which assisted-request fields must be required or optional, and whether the draft acknowledgement should use consent or another form of notice/acknowledgement.]
• [Waitlist update frequency and a working method to stop updates.]
• [Retention periods and deletion processes for each information type.]
• [Database, email, file-storage and analytics providers, data locations and transfers.]
• [How existing file URLs are access-controlled and who can retrieve them.]
• [Privacy contact, data-request process and any applicable response times.]
• [Qualified UK legal and tax reviewer identity/credentials, review scope and date.]
• [Future tax-document categories and purposes, allowed formats, access/deletion behavior, and customer-facing tax-guidance scope.]
• [Owner responsible for changing availability after qualified review is confirmed.]

This page does not claim legal compliance, certification or completed legal or tax review. Tax-document collection is unavailable and dashboard tax guidance is unavailable according to the current owner-controlled availability settings.