Privacy notice
This notice explains what Vantage LMS Ltd, trading as Nasty Letters, collects about you, why, and what you can ask us to do with it. We are the controller of your data, registered with the Information Commissioner's Office, number ZC277412. Contact us at help@nastyletters.test.
What we collect
- Your account: your name and email address.
- Your conversation with us: what you type and the options you choose, so you can pick up where you left off.
- Your letter: the details we read from it, such as who sent it, the reference, the amount and the deadline. We keep the photo for an hour while you decide; if you ask us to check it or to take your case on, it stays with your case so your case manager can read it. Otherwise it's deleted.
- Your case: your postal address, messages between you and us, letters we write for you, and replies from the company or council.
- Signatures: when you sign a letter, the name you typed, the time, your IP address and your browser, so we can show the letter was signed by you.
- Payments: the amount, date and status. Stripe handles your card. We never see or store card numbers.
- Security records: sign-in times and technical logs, to keep accounts safe.
Why we use it
- To provide the service you asked for: our contract with you.
- To keep payment and tax records: a legal obligation.
- To keep the service secure and prevent fraud: our legitimate interests.
We don't sell your data, we don't use it for advertising, and we don't send marketing emails.
Who else handles it
These companies process data for us, under contract, only to provide our service:
- Anthropic reads the photo of your letter so we can show you the details. It does not use your letter to train its models. It also writes the assistant's answers to questions you type in the chat, from our help pages and what was read from your letter.
- Stripe takes payments.
- Purelymail sends and receives our emails.
- Our hosting provider, on servers in the United Kingdom.
When we write to the company or council for you, they receive the letter and the details in it.
How long we keep it
- Conversations and details read from a letter you don't go ahead with, if you never sign in: deleted after 24 hours.
- An account whose email address is never confirmed with its code: deleted after 24 hours.
- Cases, messages and letters: 6 years after the case ends, in case of a later dispute. To be confirmed.
- Payment records: 6 years, as tax law requires.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it. You can download your data and request deletion from Your account. We reply within one month.
If you're unhappy with how we handle your data, tell us first. You can also complain to the Information Commissioner's Office.