Privacy

About this page

This is placeholder text in a template, not legal advice. Coffer is a front-end template: it has no server, sets no cookies, sends nothing anywhere, and every figure in it is demo data generated at build time. The sections below are the shape a real policy takes, so you have somewhere to put yours. Have a lawyer write the real one.

What is collected

A product built on this template would typically hold: the name and email of each person who signs in; the organisation's own details and tax registration; and the accounting records entered into it — customers, suppliers, invoices, bills and bank transactions.

It would also keep technical records: sign-in times, the address a session came from, and an audit log of what was changed and by whom. In an accounting product that log is not optional — it is what makes the books defensible.

What it is used for

• Keeping the books and producing the reports that are asked for.
• Signing people in and keeping accounts secure.
• Sending what was asked for — an invoice to a customer, a reminder, a statement.
• Meeting a legal obligation, such as keeping records for the period the tax authority requires.

Accounting records are not advertising data. A policy worth having says plainly that they are never sold, and never used to train anything.

How long it is kept

Accounting records usually have to be kept for a fixed number of years after the period they belong to — six in many places, seven in others. That obligation outlives the account, so a policy has to say what happens when someone closes theirs: the records stay for the statutory period, and everything else goes.

Who else sees it

Name every processor and what each one does: where the data is hosted, who sends the email, who takes the payments, and who provides the bank feed. A list of categories tells the reader nothing.

Your rights

Depending on where someone lives, they may have the right to see what is held, to correct it, to have it deleted, to take it elsewhere in a usable format, and to object to some uses of it. Say how to exercise each one and how long an answer takes.

Be honest where a right is limited: a record that has to be kept for tax cannot simply be deleted on request, and saying so plainly is better than a blanket promise that cannot be met.

Getting in touch

A real address, a real email, and the name of whoever is answerable for this — plus, where one is required, the supervisory authority a complaint can go to.