Last updated: 16 May 2026
This Privacy Policy explains how Ionel Viorel trading as Addlify collects, uses, stores and shares personal data when you visit addlify.uk, purchase one of our Microsoft Excel or Word add-ins, subscribe to our newsletter or otherwise contact us.
We are the data controller under the UK GDPR, the Data Protection Act 2018, and (for EU data subjects) the EU GDPR (Regulation 2016/679).
We have appointed EU Rep as our Representative under Article 27 of the EU GDPR. All GDPR queries from EU Data Subjects or Data Protection Authorities should be submitted via eurep.ie's dedicated form.
BizLegal Limited trading as EU Rep, registered office: 27 Cork Road, Midleton, Co. Cork, Ireland. Company number 635921.
| Category | Examples | Lawful basis | Retention |
|---|---|---|---|
| Identity & contact | Name, email, phone, billing address, country | Contract; legal obligation; legitimate interests | 7 years (HMRC) |
| Order & licence | Order ID, products, licence keys, downloads, support tickets | Contract; legal obligation | 7 years |
| Payment metadata | Last 4 digits of card, Stripe/PayPal IDs (no full card data) | Contract; legal obligation | 7 years |
| e-Factura / SAF-T submission metadata (Romanian customers) | Submission timestamps, ANAF reference IDs, CIF, status — invoice content itself is not stored by Addlify | Legal obligation (Legea 82/1991 art. 25; OUG 120/2021) | Minimum 10 years |
| HMRC / ANAF integration tokens | OAuth access & refresh tokens and qualified digital certificate references used to connect the add-in to HMRC Making Tax Digital or ANAF SPV — encrypted at rest with AES-256 | Contract (performance of the add-in service) | Duration of the subscription + 30 days |
| Marketing | Newsletter subscriber email, preferences, opens/clicks | Consent (PECR + UK GDPR Art. 6(1)(a)) | Marketing profile deleted within 30 days of unsubscribe. A minimal consent record (that consent was given or withdrawn, and when) is kept for 12 months afterwards as proof of consent under UK GDPR Art. 7(1). |
| Technical & analytics | IP, device, browser, OS, pages, timestamps | Consent (non-essential); legitimate interest (security) | Up to 26 months |
| Advertising | Meta Pixel, Google Ads conversion, retargeting | Consent (UK GDPR Art. 6(1)(a) + PECR Reg. 6) | Up to 13 months |
| Communications | Contact form, emails, support tickets | Legitimate interest; contract; consent | 3 years from last contact |
The Addlify Finance Microsoft Excel add-in is a SaaS-licensed product distributed via Microsoft AppSource and direct sideload. This section describes specifically what data the add-in processes when running inside your Excel workbook, independent of the rest of the website.
Retention for add-in usage data: licence and device records are kept while the subscription is active plus 7 years after cancellation (HMRC tax requirement). You can request deletion of optional records (analytics events, support emails) at any time by emailing legal@addlify.uk.
By installing the Addlify Finance add-in from Microsoft AppSource or by sideload, you accept this processing scope. The full EULA and Terms & Conditions govern the licence agreement.
We do not sell your personal data. We share it only with the following processors under Article 28 GDPR contracts:
Our Website uses cookies and similar technologies. We rely on:
Full list and lifetimes are in our Cookie Policy.
Some processors are based outside the UK and EEA (e.g. Google, Meta in the US). We rely on:
We keep personal data only as long as necessary. Retention periods are shown in clause 3. Where the law requires longer (e.g. HMRC = 6+ years for accounting), we keep data for that longer period and then delete or anonymise.
Under UK GDPR / EU GDPR you have the rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent, and lodging a complaint with the ICO or your local supervisory authority. To exercise any right, email legal@addlify.uk with subject "Data subject request". We respond within one month (extendable up to two further months for complex requests).
We do not carry out automated decision-making with legal or similarly significant effects (Article 22 GDPR). Some advertising partners may carry out limited profiling for ads — only with your cookie consent, and you can opt out at any time.
The Website and Products are not directed at children under 16. We do not knowingly collect data from children. If we do, we delete it on notification.
We use TLS encryption, salted-hashed passwords, restricted access, encrypted backups, 2FA on admin accounts, regular updates, and monitoring. No system is 100% secure.
If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority — the UK Information Commissioner's Office (ICO) and, for data subjects in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP) — without undue delay and, where feasible, within 72 hours of becoming aware of the breach, in accordance with Articles 33–34 of the UK GDPR and EU GDPR. Where the breach is likely to result in a high risk to you, we will also notify you directly without undue delay.
We may update this Policy. The "Last updated" date reflects the most recent change. For material changes we notify you by email or by prominent notice on the Website before they take effect.
Email: legal@addlify.uk · Address: Droitwich, WR9 9EZ, United Kingdom · EU representative: EU Rep (BizLegal Limited), 27 Cork Road, Midleton, Co. Cork, Ireland (Company number 635921), via eurep.ie.
Complaint to ICO: ico.org.uk, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF · Tel: 0303 123 1113. Or your local EU supervisory authority — see edpb.europa.eu.