Privacy Policy

In The Middle is operated by The Middle Men Services LTD, company number 16566862. Registered office: 66 Paul Street, London, EC2A 4NA, United Kingdom. Privacy enquiries can be sent to hello@inthemiddleinvoices.co.uk.

1. Who this policy is for

This policy explains how personal information is handled when someone creates an account, manages a business profile, stores customer details, creates invoices, records payments or sends invoice and receipt emails through In The Middle.

2. Information we may process

This can include account details, business contact details, customer names and contact information, invoice and job information, payment records, tax-related identifiers entered by users, and technical/security information required to operate the service.

3. Why we use information

We use information to provide the service, authenticate users, create and store invoices and receipts, send requested emails, record payments, provide support, maintain security, prevent misuse, administer subscriptions and meet applicable legal obligations.

4. Legal bases

Where UK data-protection law applies, processing may be based on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, or consent where consent is appropriate.

5. Service providers

The service uses specialist providers for hosting, authentication/database services, transactional email and payment processing. Current technical providers include Vercel, Supabase, Resend and Stripe. Each provider processes information in accordance with its role and applicable contractual/privacy terms.

6. Customer information entered by businesses

A business using In The Middle is responsible for having an appropriate basis to enter and use its customers' personal information. In The Middle provides software used to store and process that information on the business user's instructions.

7. Retention

Invoice and associated payment records may be retained for up to 5 years to support business record-keeping and the service's invoice-history features, unless a longer period is legally required or a shorter period is appropriate. Other account, support and security information is retained only for as long as reasonably needed for the purpose for which it is processed.

8. Security

We use technical controls intended to separate business data, protect authentication sessions and keep privileged server credentials out of browser-exposed configuration. No online service can guarantee absolute security.

9. International processing

Some service providers may process information outside the United Kingdom. Where required, the relevant provider should use appropriate lawful transfer safeguards.

10. Your rights

Depending on the circumstances, individuals may have rights to access, correct, erase or restrict use of their personal information, object to certain processing, or request data portability. They may also have the right to complain to the UK Information Commissioner's Office.

11. Contact

Privacy and data-protection questions can be sent to hello@inthemiddleinvoices.co.uk.