VatCake handles information that matters: identity documents, shopping receipts, address verification results and refund details. We design our systems and processes to protect that information at every stage of the VAT refund journey.
✓ We protect data in transit using secure encrypted connections.
✓ We store data using secure cloud infrastructure.
✓ Access to personal information is restricted to authorised users and systems.
✓ We use specialist providers for identity verification, address verification, receipt extraction and refund payments.
✓ We do not store payment card details used for address verification.
✓ We monitor the refund workflow for fraud, duplicate claims and operational issues.
Information sent between the app, our systems and trusted providers is protected using secure encrypted connections.
VatCake uses secure cloud infrastructure and access controls to protect account, claim and refund information.
Access to personal information is limited to people and systems that need it to provide the service, support users, prevent fraud or comply with legal obligations.
Identity verification is handled by specialist providers that are designed to process identity documents and facial verification securely.
Payment card details used for address verification are entered with our payment service provider. VatCake receives the verification result but does not store the card details.
Receipt images are used to prepare VAT refund claims. Receipt extraction helps reduce manual entry and improve claim accuracy.
Refund payment details are used to send VAT refunds and are shared only where necessary with payment providers.
We maintain logs, access controls and review procedures to help identify errors, unauthorised activity and fraud risks.
✓ We do not sell personal information.
✓ We do not use payment card details to charge users for address verification.
✓ We do not use personal information for behavioural advertising.
✓ We do not store payment card details entered with Stripe for address verification.