Privacy Policy

MT1L (“MT1L”, “we”, “us”) is the home of the VAT Framework. We are the data controller for the personal information described here, and we handle it in line with UK data protection law, including the UK GDPR and the Data Protection Act 2018.

We collect very little. This policy explains, in plain English, what we collect when you contact us or use the VAT Scan, why, and the rights you have. Questions are welcome at hello@mt1l.com.

We only hold information you actively choose to share with us:

• When you get in touch. If you send an enquiry, we collect the details you give us, typically your name, email address, organisation and your message, along with how you would like us to reply.
• When you use the VAT Scan. If you ask for access, we collect your name, work email and organisation. The scan also works with the description of the idea or proposal you choose to enter, so it can respond to it.
• When you book a call. Scheduling is handled by our booking provider, who collects the details needed to arrange the meeting.

We also collect limited, privacy-friendly analytics about how the site is used (such as aggregate page views). This does not identify you, and we do not use advertising or cross-site tracking cookies.

We use this information to:

• respond to your enquiry and provide what you have asked for;
• operate the VAT Scan and return your result;
• arrange any call you request; and
• keep the website working well and secure.

We do not sell your information, and we do not use it for automated decisions about you.

Under the UK GDPR, we rely on:

• Legitimate interests, to respond to enquiries, run the VAT Scan and keep the site secure, in a way you would reasonably expect;
• Consent, where you give it (for example, by choosing to contact us), which you can withdraw at any time; and
• Legal obligation, where the law requires us to keep or disclose certain information.

We keep things lean. We share your information only with a small number of trusted providers who help us run MT1L, and only so far as they need it to provide their service. They act on our instructions under appropriate contracts. These cover:

• secure website hosting and data storage;
• privacy-friendly website analytics;
• appointment scheduling, if you book a call; and
• AI processing for the VAT Scan (see our AI Use Policy).

We may also disclose information where we are required to do so by law.

Some of our providers operate outside the UK. Where information is transferred internationally, we rely on appropriate safeguards, such as UK adequacy regulations or the UK International Data Transfer Agreement, so that it stays protected.

We keep personal information only for as long as we need it for the purposes above, and then delete it. Aggregate analytics that do not identify you may be kept for longer.

You have the right to ask us to:

• give you a copy of the information we hold about you;
• correct anything that is wrong or incomplete;
• delete your information, or restrict or object to how we use it; and
• provide it in a portable format, where that applies.

To exercise any of these, email hello@mt1l.com. You can also complain to the Information Commissioner’s Office at ico.org.uk, though we would welcome the chance to put things right first.

We use appropriate measures to protect your information, including encryption in transit and access controls. Our services are intended for organisations and professionals; they are not aimed at children, and we do not knowingly collect information from anyone under 16.

We may update this policy from time to time. When we do, we will change the “last updated” date above.