Legal
Privacy Policy
This policy explains what personal information ApproveTrail collects, why it is collected and what rights you have over it.
Who we are
ApproveTrail is an independent sole trader business operated by Tilak Giri in the United Kingdom. For the purposes of UK data protection law, Tilak Giri, trading as ApproveTrail, is the data controller for personal information collected through this website.
Postal address: 72 Highcross Street, Leicester, LE1 4NN, United Kingdom. Email: hello@approvetrail.co.uk. Telephone: +44 7350 230388.
Information we collect
We collect only the information needed to answer enquiries, complete purchases and supply the software packages listed on this website.
- Contact details supplied through the enquiry or contact form: name, business name, email address, telephone number and enquiry details.
- Purchase information supplied during checkout, including your email address and billing address, collected and processed by Stripe.
- Support communications you send us relating to a purchased package, including questions about permitted-user limits, active-review capacity or document-record capacity.
- Review-related information you provide when describing how you intend to use the software, such as the number of reviewers, document types or workflow structure you need help configuring. We do not access the content of documents you review inside your own account beyond what is necessary to provide support you have requested.
- Limited technical information recorded by our server, such as the IP address associated with an enquiry or checkout attempt, used to prevent abuse.
- Correspondence you send to us by email, telephone or post.
Information we do not collect
We do not collect or store card numbers, CVC codes or complete payment method details. Card payments are handled entirely by Stripe on Stripe's own systems.
We do not use advertising trackers, cross-site profiling or behavioural advertising cookies. We have not implemented any unverified security certification schemes and make no claim to hold any such certification.
Lawful bases for processing
- Responding to enquiries: legitimate interests, and steps taken at your request prior to entering into a contract.
- Processing a purchase and supplying the package bought: performance of a contract.
- Sending digital access, setup information and support relating to a purchase: performance of a contract.
- Keeping basic records of orders, refunds and correspondence: legal obligation and legitimate interests.
- Protecting the website and service against abuse and fraudulent activity: legitimate interests.
Payment processing
Payments are processed by Stripe Payments Europe, Ltd. and its affiliates. When you complete a purchase, Stripe's embedded payment interface is displayed inside this website. Stripe acts as an independent controller for the payment data it collects and operates under its own privacy policy.
We receive from Stripe only limited confirmation information: the package purchased, the amount, the payment status, a session reference and the email address you provided at checkout.
How long we keep information
Enquiry correspondence is kept for up to twenty-four months unless it becomes part of a customer record. Purchase and refund records are kept for six years to meet UK tax and accounting requirements. Support correspondence relating to an active package is kept for the life of that package plus twenty-four months. Server logs are kept for a short period and are limited to information needed to prevent abuse.
Sharing your information
We do not sell personal information. Information is shared only with service providers necessary to operate the business: our hosting provider, our email provider and Stripe as payment processor. Information may also be disclosed where required by law.
International transfers
Some service providers may process information outside the United Kingdom. Where that happens we rely on the safeguards those providers put in place, including UK-approved transfer mechanisms such as the UK International Data Transfer Agreement or adequacy regulations.
Cookies
This website uses essential cookies needed to operate the cart and checkout. Optional preference cookies remember your cookie choice. Analytics and marketing cookies are not currently installed. See the Cookie Policy for details and how to change your choices.
Your rights
Under UK data protection law you have the right to access your personal information, to have inaccurate information corrected, to request erasure in certain circumstances, to restrict or object to processing, and to request portability of information you provided to us.
To exercise any right, email hello@approvetrail.co.uk. We respond within one month. If you are unhappy with our response, you may complain to the Information Commissioner's Office at ico.org.uk, or by telephone on 0303 123 1113.
Security
The website is served over HTTPS. Configuration files and credentials are stored outside the public web directory, secret keys are never exposed to the browser, and access to enquiry, order and support records is limited to the business owner. No unverified third-party security certification is claimed.
Contact
Questions about this document can be sent to hello@approvetrail.co.uk or posted to 72 Highcross Street, Leicester, LE1 4NN, United Kingdom.
ApproveTrail is independently owned and operated by Tilak Giri as a sole trader in the United Kingdom. This document is provided for transparency and does not constitute legal advice. It has not been reviewed or approved by a solicitor. Nothing in this document removes or limits your statutory rights as a consumer in the United Kingdom.
Ready for a clearer approval process?
Compare the seven ApproveTrail packages and choose the level that matches your reviewers, document volume and approval requirements.