Privacy Policy

Last updated: 30 April 2026

1. Who we are

APS Ventures is a sole trader operating in the United Kingdom. We operate The Stripe Dunning Audit service.

For the purposes of UK data protection law (the UK General Data Protection Regulation and the Data Protection Act 2018), we are the data controller.

Contact: support@amritpalsingh.co.uk

2. What data we collect

Data	When	Purpose
Name, email address	When you purchase the audit or contact us	To deliver the report and communicate with you
Payment information	When you purchase the audit	To process your payment (handled entirely by Stripe — we never see or store your card details)
Stripe API key (read-only)	When you share it with us for the audit	To access your Stripe payment data and produce the audit report
Stripe account data (payment failures, subscriptions, invoices)	During the audit	To analyse failed payments and produce recommendations
Contact form messages	When you contact us via the website	To respond to your enquiry

3. Legal basis for processing

We process your personal data on the following legal bases under UK GDPR:

Contract performance (Article 6(1)(b)): Processing your name, email, payment, and Stripe data is necessary to deliver the audit service you purchased.
Legitimate interests (Article 6(1)(f)): We may use your email to follow up on the audit or ask for feedback. You can opt out at any time.

4. Who we share data with

Stripe — processes your payment securely. See Stripe's privacy policy.

We do not sell your data to anyone. We do not share your Stripe account data with any third party.

5. How long we keep your data

Stripe API key: Deleted immediately after the audit is delivered. We recommend you also revoke the key on your end.
Stripe account data: Not retained after the report is delivered. We keep only the final PDF report for our records.
Name and email: Retained for up to 12 months after purchase for support and follow-up purposes, then deleted.
Payment records: Retained for 6 years as required by HMRC for tax purposes.

6. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Rectify any inaccurate data
Erase your data (subject to legal retention requirements)
Restrict processing in certain circumstances
Data portability — receive your data in a structured, machine-readable format
Object to processing based on legitimate interests

To exercise any of these rights, email us at support@amritpalsingh.co.uk. We will respond within 30 days.

7. Cookies

Our website does not currently use cookies or tracking technologies. If this changes, we will update this policy and implement an appropriate consent mechanism as required by the Privacy and Electronic Communications Regulations (PECR).

8. Data security

We take reasonable technical and organisational measures to protect your data. Payment processing is handled by Stripe, which is PCI-DSS Level 1 certified. Our website is served over HTTPS.

9. International transfers

Your data is processed in the United Kingdom. If any data is transferred outside the UK (for example, through the use of cloud services), we ensure appropriate safeguards are in place in accordance with UK GDPR.

10. Complaints

If you are unhappy with how we handle your data, please contact us first at support@amritpalsingh.co.uk.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Helpline: 0303 123 1113

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when the latest changes were made.