Privacy Policy

Last updated: 16 October 2026

LatePay UK is a product of Axiom Atelier Ltd, registered in England and Wales (company number 17454858). We are the data controller for your account data under the UK GDPR and the Data Protection Act 2018. For the client details you enter into LatePay, you are the controller and we act as your processor.

What we collect

Your email address and business details; invoice and client information you enter (names, email addresses, amounts, dates); billing records; and basic technical data such as logs needed to run and secure the service.

Why we use it (lawful basis)

To provide the service you signed up for (contract); to take payments and keep accounting records (legal obligation); and to secure and improve the service (legitimate interests). We do not sell your data.

Who processes it for us

• Supabase: database and login (EU hosting).
• Stripe: subscription payments. We never see or store your full card details.
• Resend: sending login and reminder emails.
• Vercel: website hosting.
• An AI provider for optional reminder wording, which receives only the reminder text.

Some providers may process data outside the UK; where they do, they use safeguards approved under UK law, such as the International Data Transfer Addendum or adequacy regulations.

How long we keep it

For as long as your account is open. After you close it, we delete your data within 90 days, except billing records, which we keep for 6 years as required by law.

Your rights

You can ask to access, correct, delete or export your data, or object to or restrict its processing, by emailing support@axiomatelier.co.uk. You may also complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use only essential cookies needed for login and to remember your landing page variant. We do not use advertising cookies.

Analytics

We measure visits with anonymous, cookie-free analytics (Vercel Web Analytics and our own simple page counter). We record only the page visited, the referring website, any campaign tag (utm_source) and the date. We do not store IP addresses, set cookies or track you across sites, and the data cannot identify you.