Privacy Policy

Last updated: 2026-03-31

Hoike Technologies (“we”, “our”, “us”) provides VAT automation, invoice processing, and Making Tax Digital (MTD) VAT submission tools for UK businesses. We take your privacy seriously and comply with all UK GDPR and Data Protection Act 2018 requirements.

1. Information We Collect

We collect the following categories of information:

• Business details (name, VRN, contact information).
• Uploaded invoice documents and extracted invoice data.
• HMRC OAuth credentials including access tokens and refresh tokens.
• VAT obligations, VAT return details, and submission responses received from HMRC APIs.
• Technical logs (IP address, browser type, timestamps).

2. How We Store & Protect Your HMRC Tokens

When you connect your HMRC account, we receive an access token and refresh token. These tokens are:

• stored securely in encrypted form within our database,
• used only to retrieve obligations or submit VAT returns,
• never shared with any third parties,
• rotated automatically via HMRC token refresh rules.

3. How We Use Your Data

Your data is used only for:

• retrieving VAT obligations from HMRC,
• preparing VAT summaries from invoice data,
• submitting VAT returns to HMRC on your behalf,
• generating audit logs,
• providing customer support.

4. Legal Basis for Processing

We process your data on the following grounds:

• Performance of a contract (providing VAT return automation).
• Compliance with legal obligations (Making Tax Digital requirements).
• Legitimate business interests (fraud prevention, platform security).

5. Data Sharing

We share your information only with:

• HMRC, via their secure MTD VAT API.
• Our hosting provider (AWS), acting as a GDPR-compliant data processor.

We do not sell or share data with marketers or third-party advertisers.

6. Data Retention

Invoice and VAT submission records are retained for a minimum of 6 years, in line with HMRC record-keeping obligations.

7. Your Rights

You have the right to:

• Access your data.
• Correct inaccurate information.
• Request deletion of data (subject to legal retention requirements).
• Withdraw HMRC permissions at any time.
• Request a copy of all data relating to you.

8. Contact Us

For privacy concerns or GDPR requests, email us at: support@hoiketechnologies.com