Privacy Notice
Version 2026-07-27. Last updated 27 July 2026.
This notice explains what personal information Sorted Refunds collects, why we collect it, how long we keep it, and the rights you have over it.
Who controls your data
Sorted Refunds, UB-08, Cluster G, Jumeirah Lake Towers, Dubai, United Arab Emirates, is the data controller. Contact us about anything in this notice at info@sortedrefunds.co.uk.
What we collect
| Category | Examples |
|---|---|
| Identity | Name, date of birth, National Insurance number, UTR, photo ID where required |
| Contact | Address, email, phone number |
| Financial | Income, CIS deductions, expenses, bank account for your refund |
| Documents | CIS statements, payslips, P60s, invoices and receipts you send us |
| Correspondence | Messages between you and us, including WhatsApp and email |
Why we use it, and our lawful basis
- To prepare and file your claim. This is performance of our contract with you.
- To meet legal duties. Tax and record-keeping obligations, and anti-money-laundering checks where they apply.
- To contact you about your claim. This is performance of our contract.
- To improve our service and keep records of what was agreed. These are our legitimate interests, balanced against your rights.
Where we handle special category data, or where we ask to contact you for marketing, we rely on your consent, which you can withdraw at any time.
Who we share it with
- HMRC, to make and support your claim.
- Service providers who host our systems and email, under contract and only on our instructions.
- Professional advisers or authorities, where the law requires it.
We do not sell your data, and we do not share it for anyone else's marketing.
Where your data is held
We operate from the United Arab Emirates and use service providers that may store data in the UK, the European Economic Area and the United States. Where data leaves the UK we rely on appropriate safeguards, such as the UK International Data Transfer Agreement or adequacy regulations.
How long we keep it
| Data | Kept for |
|---|---|
| Claim records and correspondence | 6 years after the tax year concerned, to meet HMRC record-keeping expectations |
| Identity documents | 5 years from the end of our relationship, where anti-money-laundering rules apply |
| Enquiries that do not become claims | 12 months |
| Any credentials shared with us for a claim | Deleted as soon as the claim is filed, and no later than 90 days |
Keeping it safe
Access to client information is limited to authorised Sorted Refunds staff who need it to do their job. Accounts are protected by strong passwords and two-factor authentication where available. We will never ask you for a one-time passcode.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. You can also withdraw consent where we rely on it. Email info@sortedrefunds.co.uk and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
We may update this notice. The version number and date at the top tell you which version you are reading.