In short: employee data never leaves your device. The names, National Insurance numbers, PAYE references and share details in the files you load are read and checked inside your web browser. They are never uploaded, never sent to us, to analytics or to anyone else, and never stored by us. They are not saved in your browser either: closing the tab, or pressing "Clear my data", removes them.
Who is responsible
CHENFLOW LIMITED (company number 12064784), trading as Share Scheme Return, is the controller for the limited personal data described below. Contact: [email protected].
Data in your files
We never receive it. The checker is a web page that runs on your computer. The page is not allowed to send data anywhere except our own site (a security setting in the page enforces this), and the only request it makes with any content is the licence check, which sends your licence key and nothing else. Your files, results and built return files exist only in your browser and on your own computer if you download them. You remain the controller of that data.
What we do process
- Licence key checks. When you build files, the page sends your licence key to our server. We check it and return whether it is valid. Our server also sees your IP address, which we use only for short term rate limiting to stop abuse, and do not store with your key.
- What your browser keeps. The page saves your licence key in your browser so you do not have to paste it each time. Nothing else is saved. You can remove it by clearing site data in your browser.
- Purchases. Paddle.com, our Merchant of Record, processes your payment and billing details under its own privacy notice. Paddle tells us your email address, so we can email your licence key, and the plan, amount and transaction reference. We keep these for as long as your licence is active and then as needed for our accounting records (normally six years).
- Licence email. We send your key by email using Cloudflare's email service.
- Emails to us. If you email us, we keep the conversation to help you. Please do not send employee details or NI numbers.
- No analytics or tracking. This site sets no tracking cookies and loads no analytics. The checker page is locked so that it can only talk to our own site.
Legal bases
Performing our contract with you (licences and support), our legitimate interests (preventing abuse, understanding site use in aggregate) and legal obligations (accounting records).
Who else is involved
Cloudflare (hosting, licence server, email sending) and Paddle (payments). Some of their processing may take place outside the UK under appropriate safeguards.
Your rights
You can ask for a copy of your data, or for it to be corrected or deleted, by emailing [email protected]. You can complain to the Information Commissioner's Office at ico.org.uk.