Who we are
EPR Fees ("we", "us") provides software that helps UK packaging producers assess packaging recyclability and forecast Extended Producer Responsibility (EPR) fees, at eprfees.co.uk and app.eprfees.co.uk.
For data protection purposes, we are the data controller for the personal data described below.
What personal data we collect
We collect:
- Account data: your email address, used to sign you in via a one-time magic link. We do not store passwords.
- Billing data: if you subscribe, payment is processed by Stripe. We do not store your card details ourselves; Stripe handles this under its own privacy policy.
- Packaging data you enter: the packaging component information you input to use the classification and fee forecast features (materials, weights, quantities). This may indirectly relate to your business but is not personal data about an individual unless you choose to include it.
- Usage data: basic technical information such as IP address and browser type, collected automatically to keep the service secure and working correctly.
Why we collect it
We use your data to: provide and operate the account you sign up for; process payment for a subscription; send you service-related emails, including magic-link sign-in emails and reminders ahead of your EPR reporting deadlines; respond to support requests; and keep the service secure.
We do not sell your data. We do not use your packaging data for any purpose other than providing the service to you.
Legal basis
We process your data on the basis of: performance of a contract (providing the service you signed up for), and legitimate interest (keeping the service secure and responding to support requests).
Who we share data with
We share limited data with the following processors, solely to operate the service:
- Neon (database hosting)
- Vercel (application hosting)
- Stripe (payment processing)
- Resend (transactional email delivery, e.g. magic-link sign-in emails)
We do not share your data with any other third party, and we do not sell it.
How long we keep your data
We keep your account and packaging data for as long as your account is active. If you cancel your subscription, we retain your data for a reasonable period in case you wish to resubscribe, after which it may be deleted. You can request deletion at any time, see below.
Your rights
Under UK GDPR, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to or restrict certain processing; and request a copy of your data in a portable format.
To exercise any of these rights, email [email protected]. We will respond within one month.
You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.
Cookies
Our marketing site uses minimal cookies necessary for the site to function. We do not use third-party advertising trackers.
Changes to this policy
We may update this policy as the service evolves. Material changes will be reflected here with an updated date.
Contact
Questions about this policy or your data: [email protected]