GDPR & Data Protection

1. Data Controller & Data Protection Officer

TAX CHECK PRO LTD (company number 16573087, registered office 50 Princes Street, Ipswich, Suffolk, England, IP1 1RJ), trading as Pocket Panda, is the data controller for the personal data processed under the Pocket Panda membership and on pocket-panda.co.uk. We are registered with the Information Commissioner's Office (ICO) under number ZC036388.

For data protection queries you may contact us at info@pocket-panda.co.uk, by phone on 0333 344 9063, or by post to TAX CHECK PRO LTD, 50 Princes Street, Ipswich, Suffolk, England, IP1 1RJ.

2. Lawful Basis for Processing

As noted in the Privacy Policy, we rely on lawful bases such as performance of contract, legitimate interests, and legal obligations.

We carry out legitimate interests assessments (LIAs) when relying on legitimate interest, balancing our interests against your rights. Users may contact us for a summary of such assessments where relevant.

3. Consent & Withdrawal

Where processing is based on your consent (e.g. marketing communications), you have the right to withdraw consent anytime. Withdrawal of consent does not affect processing done before withdrawal.

4. Automated Decision-Making & Profiling

Our membership tools use automated processes to calculate estimates, summaries and reminders from the figures you enter, and to match Tax Relief Notifications to the details you give us. These provide information to help you; they are not decisions about you.

We do not make fully automated decisions that have legal or similarly significant effects on you without human oversight.

You may request meaningful information about the logic used and challenge such decisions.

5. Data Protection Impact Assessments (DPIAs)

Where we judge a processing activity involves high risk to rights and freedoms, we will conduct a DPIA and, where required, consult relevant supervisory authority.

6. Security, Breach Notification & Accountability

We maintain records of processing (Record of Processing Activities, or RoPA).

We ensure “data protection by design and by default” (minimisation, pseudonymisation, access controls).

In case of a personal data breach posing risk, we will notify the UK Information Commissioner's Office (ICO) within 72 hours and communicate to affected individuals when required.

7. Cooperation with Supervisory Authority

We will cooperate with and comply with lawful orders of the ICO or equivalent supervisory authorities, including in investigations or audits.

8. International Transfers & Safeguards

Where personal data is transferred outside the UK, we will use approved safeguards (e.g. UK adequacy regulations, the ICO's international data transfer agreement or standard contractual clauses).

9. Third-Party Processors

We use third-party processors bound by contractual obligations including data confidentiality, security, and use only as instructed.

10. Data Subject Rights & Complaints

As set out in the Privacy Policy: access, correction, deletion, objection, restriction, portability, withdraw consent.

To exercise any of these rights in relation to your Pocket Panda membership:

• Contact us by email at info@pocket-panda.co.uk, by phone or by post (see section 1). No particular form is needed.
• We may ask you to confirm your identity before we act, usually by replying from the email address on your membership.
• We will respond within one month. For complex or multiple requests we may extend this by up to two further months, and we will tell you why within the first month.
• Requests are free, unless they are manifestly unfounded or excessive.

If you believe our processing breaches the GDPR, you have the right to lodge a complaint with the UK ICO (ico.org.uk) or equivalent authority in your jurisdiction.