Wevat privacy & data

For the purposes of data protection laws, Vatcat Limited is the ‘controller’ of your personal information.

register to use the App, including your name, email address, social media display name and webchat display name

generate and complete your refund form, including your home address

Reports with the status and result of your identity verification check including biometric (facial identity) checks.

We also collect GPS location information from your device when you launch or open the App.

the internet protocol address used to connect your device to the internet, the carrier and operating system information, location (region and country) and language.

transaction information contained in your receipts

process your VAT refund form and transfer payments due to you

contact you via email with marketing information about us, our events and products and services and about our third party partners

to verify your identity and location and take other measures for the prevention of fraud and other criminal activities

to comply with court orders or other notices where failure to do so would result in us breaking the law

In respect of your VAT refund forms and receipts, we retain these for 7 years from the date we make payment to you for your VAT refund

we reject the receipts you submit or do not make payment to you for any other reason, in which case will retain your receipts (and, if applicable, VAT refund form) in an identifiable form for up to 10 years for fraud prevention purposes

ensuring the non-UK/EEA countries to which transfers are made have been deemed adequately protective of your personal information for the purposes of data protection law by the relevant bodies

imposing contractual obligations on the recipient of your personal information using provisions formally issued by relevant bodies for this purpose

you may ask for your personal information to be removed from our systems by emailing or writing to us at the address at the end of this Privacy Policy

You have the right to ask for a copy of the information that we hold about you

To object to processing of your personal information

To have your personal information erased

To restrict processing of your personal information

To electronically move, copy or destroy your personal information in a standard, machine-readable form

To complain to a data protection regulator