Legal
Privacy Policy
This policy explains how CityFiscal collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
CityFiscal is operated by CityFiscal Ltd (in formation), a company being incorporated in England and Wales. Our contact email is hello@cityfiscal.com.
For the purposes of UK GDPR, CityFiscal is the data controller for the personal data described in this policy.
2. What data we collect
When you register interest via our waitlist form, we collect:
- Your name
- Your email address
- Your occupation type (e.g. sole trader, freelancer) — optional
- The date and time of your submission
We do not collect payment information, financial data, or any sensitive personal data at this stage.
3. Why we collect it
We collect this data for the following purposes:
- Waitlist management — to notify you when CityFiscal's private beta opens and to send you early access information
- Product development — to understand the types of self-employed professionals interested in the product
- Correspondence — to respond if you contact us directly
Our legal basis for processing your data is legitimate interests (running a pre-launch waitlist for a product you have voluntarily expressed interest in) and, where applicable, consent.
4. How we store your data
Your data is stored securely in a Supabase database hosted in the European Union (West Europe region). Supabase is compliant with GDPR and maintains appropriate technical and organisational security measures.
We do not store your data on our own servers. Access to the database is restricted and protected by row-level security policies.
5. Who we share your data with
We do not sell, rent, or share your personal data with third parties for marketing purposes.
We use the following sub-processors:
- Supabase — database storage (EU-hosted)
- Cloudflare — website hosting and delivery
We may disclose your data if required to do so by law or in response to a valid legal request.
6. How long we keep your data
We will retain your waitlist data for up to 24 months from the date of submission, or until you request deletion, whichever comes first. If CityFiscal does not launch, all waitlist data will be deleted.
7. Your rights
Under UK GDPR, you have the following rights:
- Right of access — you can request a copy of the data we hold about you
- Right to rectification — you can ask us to correct inaccurate data
- Right to erasure — you can ask us to delete your data at any time
- Right to object — you can object to us processing your data
- Right to restrict processing — you can ask us to limit how we use your data
- Right to data portability — you can request your data in a portable format
To exercise any of these rights, email us at hello@cityfiscal.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
CityFiscal currently uses no tracking cookies, analytics, or third-party advertising scripts on this website. The only data stored is what you voluntarily submit via the interest form. See our Cookie Notice for full details.
9. Changes to this policy
We may update this Privacy Policy as CityFiscal develops. When we do, we will update the date at the top of this page. We encourage you to review this page periodically.
10. Contact
For any questions about this Privacy Policy or your personal data, contact us at hello@cityfiscal.com.