7LOOP LIMITED · 7looplimited.cloud

Privacy Policy

Last updated: 17 August 2026. 7LOOP LIMITED, 74 Shopton Road, Birmingham, United Kingdom, B34 6NX. Contact email: help@7looplimited.cloud. Telephone: +44 7411 526074.

1. Introduction and who we are

This Privacy Policy explains how 7LOOP LIMITED collects, uses, stores, shares and otherwise processes personal data in connection with the website at 7looplimited.cloud, related landing pages, contact forms, correspondence, and the design, build and support of tax compliance software, tax filing app development, financial management applications, digital tax solutions, income tracking software, tax calculation applications, finance automation platforms, accounting mobile solutions, tax documentation software and other fintech application development services.

7LOOP LIMITED is a company operating from 74 Shopton Road, Birmingham, United Kingdom, B34 6NX. For the purposes of the United Kingdom General Data Protection Regulation and the Data Protection Act 2018, 7LOOP LIMITED is the controller of personal data described in this policy unless a written agreement states that we act as a processor for a named client. Questions may be sent in writing to help@7looplimited.cloud or by telephone to +44 7411 526074.

This policy is written for a United Kingdom audience and is intended to be read with our Cookie Policy, Terms of Service and Terms and Conditions. It is not a privacy notice issued by His Majesty’s Revenue and Customs, and nothing in it creates a client–adviser relationship for tax advice. Software that we design may process tax-related information on behalf of a client under a separate data processing schedule.

We take a conservative approach to personal data. We collect what is needed to understand a request, to perform a contract, to operate a lawful business, and to protect the company, our staff and our clients. We do not sell personal data. We do not use contact forms as a marketing list without a lawful basis. We do not require you to create an account merely to read this website.

If you are a child, do not use this website to send us personal data. Our services are designed for organisations and adult professionals. If we learn that we have collected personal data relating to a child in error, we will delete it unless the law requires us to retain a limited record of the deletion itself.

2. The data we collect

Identity and contact data may include your name, job title, organisation, email address, telephone number, postal address, and the content of messages you send to us. If you write from a company domain we may infer your employer. If you visit 74 Shopton Road by arrangement we may record visitor details for security and fire safety.

Enquiry data includes the description of loose processes, systems, deadlines and commercial context that you choose to share. You should not send passwords, payment card primary account numbers, national insurance numbers of third parties, bulk employee files, or special category data through the public form. If a project later requires such information, we will agree a controlled channel.

Technical data may include internet protocol address, browser type and version, time zone setting, device type, referring page, pages viewed, and approximate location derived from IP at city or region level. We do not use this website to perform covert profiling of your financial life. Server logs exist to keep the site available and to investigate abuse.

Contract and billing data, where we enter a paid engagement, may include purchase order numbers, billing addresses, VAT numbers, payment references, and records of invoices, credits and correspondence about scope. We do not store full payment card details on 7looplimited.cloud.

Recruitment data, if you apply for work, may include a curriculum vitae, portfolio links, and right-to-work information when a role proceeds. We will tell you if a longer retention applies to a particular vacancy.

Client-project data is governed first by the contract. It may include user stories, test accounts, screenshots, logs, and limited production samples provided for diagnosis. We treat such material as confidential and, where it contains personal data of your customers or staff, we process it on documented instructions as processor unless the contract says otherwise.

3. How we collect data

You may give us data directly by completing the cue intake form, sending email to help@7looplimited.cloud, telephoning +44 7411 526074, writing to 74 Shopton Road, Birmingham, B34 6NX, or meeting us. You may also give data by continuing a conversation we did not start, for example if a mutual contact introduces you.

Automated technologies collect limited technical data when your browser requests pages, style sheets, scripts and images. Cookies and similar technologies are described in the Cookie Policy. You can refuse non-essential cookies where a control is offered.

We may receive data from service providers who host email, domains, or professional introductions, and from public sources such as Companies House when we need to confirm a contracting party. We do not buy marketing lists of individuals for cold emailing about tax filing app development.

4. Purposes and lawful bases

We process enquiry data to respond to you, to assess whether we can help, and to keep a short record of what was asked. The lawful basis is typically legitimate interests in operating a specialist software studio, or steps prior to entering a contract if you have asked for a proposal. You may object to legitimate interests processing as described below.

We process contract data to perform the contract, to invoice, to provide support, to manage change, and to meet accounting and tax obligations of 7LOOP LIMITED itself. The lawful bases are contract and legal obligation. We cannot delete invoices merely because a project has ended.

We process security and log data to protect the website, our mailboxes and our premises, to detect fraud, and to defend legal claims. The lawful basis is legitimate interests, and in some cases legal obligation.

We may process limited data to improve the clarity of this website, for example by noting which service pages are requested. We do not run behavioural advertising networks on 7looplimited.cloud. If that ever changes, we will update this policy and, where required, seek consent.

Where we act as processor, the lawful basis for the underlying activity is determined by the client controller. Our processing is then necessary for the contract with that client and for our legal obligations as a processor, including security, breach cooperation and deletion on instruction.

We do not carry out solely automated decision-making that produces legal or similarly significant effects about individuals who visit this website. Tax calculation software we build for clients may apply deterministic rules to figures the client supplies. That is a product function under the client’s control, not a hidden decision about you personally when you merely read these pages.

5. Special category and criminal data

We do not seek special category data through the public website. Tax software can, in some client environments, sit near information that reveals health, trade union membership or other special category data if a client stores it badly. We instruct clients not to place such data in channels we have not designed for it. If special category data is accidentally received, we will restrict access, discuss deletion or return, and record the incident internally.

We do not collect criminal offence data via this site. If a client engagement later requires background checks for staff who will touch production systems, that will be handled under a separate notice and a lawful condition of the Data Protection Act 2018.

6. Sharing

We share data with service providers who host email, store files, provide accounting tools, or supply legal and professional advice to 7LOOP LIMITED. They are required to process data only on our instructions or as independently necessary for their regulated role.

We may share data with a client’s authorised personnel when you write to us about that client’s project. We may share data with courts, regulators, HMRC in respect of our own company tax, or law enforcement where required by law or to protect rights.

We do not sell personal data. We do not permit service providers to use enquiry content to train public generative models. If a tool we use changes its terms in a way that would allow that, we will stop using the tool for personal data or obtain a suitable control.

If 7LOOP LIMITED is involved in a reorganisation, assignment of contracts, or sale of assets, personal data may transfer to a successor that continues the same kind of business, subject to this policy or a successor policy of equal protection.

7. International transfers

We prefer to keep personal data in the United Kingdom. Some vendors may process data in the European Economic Area or in other countries. Where a transfer is not covered by an adequacy regulation, we use the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, together with a transfer risk assessment.

You may ask us for a summary of the safeguards that apply to a particular vendor used on a live project. We will not publish a complete security architecture in a public policy if doing so would increase risk to clients.

8. Retention

Enquiry records that do not become a contract are typically kept for up to twenty-four months so that we can recognise a returning conversation and defend a complaint about what was said. You may ask us to delete an unsuccessful enquiry earlier unless we must keep a minimal record of the request to delete.

Contracts, invoices, and tax records of 7LOOP LIMITED are kept for at least six years after the end of the relevant financial year, and longer if a dispute is open. This is a legal and accounting requirement, not a marketing choice.

Processor data is retained according to the client’s instructions and the contract, then deleted or returned, except for encrypted backups that expire on a rolling cycle, and except where UK law requires a copy to be kept.

Server logs are rotated on a short cycle unless they are needed for an investigation. Recruitment records for unsuccessful candidates are typically kept for twelve months unless you ask us to keep a CV for longer.

9. Security

We use access control, least privilege, encrypted transport for the public website, and commercial mailbox security. Devices used by 7LOOP LIMITED are protected with authentication and disk encryption where the platform allows. We train people who handle client materials to treat tax-related files as confidential even when they look ordinary.

No method of transmission or storage is perfect. We will notify the Information Commissioner’s Office and affected individuals when the law requires it. Clients who appoint us as processor will receive cooperation consistent with the contract and UK GDPR Articles 32 to 34.

You can reduce risk by not sending unnecessary personal data, by using unique passwords on your side, and by telling us promptly if you believe an email from us is forged.

10. Your rights

You have the right to access personal data we hold about you, to rectify inaccurate data, to erase data in the circumstances set out in UK GDPR, to restrict processing, to object to processing based on legitimate interests, and to data portability where processing is automated and based on consent or contract. You may withdraw consent where consent was the basis, without affecting prior lawful processing.

These rights are not absolute. We may refuse a request that is unfounded or excessive, or keep data we must keep for law, accounting, or the establishment, exercise or defence of legal claims. We will explain our reasons.

To exercise rights, write to help@7looplimited.cloud from an address we can reasonably associate with you, or send a letter to 74 Shopton Road, Birmingham, United Kingdom, B34 6NX. We may need to verify identity. We will respond within one month, or explain a lawful extension.

You may complain to the Information Commissioner’s Office at ico.org.uk. We would prefer the chance to settle the string first, but you are not required to contact us before the ICO.

11. Cookies, analytics and this website

This website is a professional brochure and intake surface, not a consumer social product. The Cookie Policy describes technologies in more detail. Essential storage may be needed for the mobile navigation state in your browser. We do not use the contact form to plant a hidden identifier in your tax affairs.

Links to Google Maps on the contact page cause Google to receive a request if you load the map. That request is governed by Google’s own terms and privacy notice. If you do not wish to load the map, do not open the contact page map frame; our address is printed in text: 74 Shopton Road, Birmingham, United Kingdom, B34 6NX.

Fonts may be requested from Google Fonts. That request can expose your IP address to Google. If that is unacceptable, you may use browser controls or a font blocker; the site remains readable with system fallbacks.

12. Marketing

We do not add website visitors to an email newsletter by default. If we ever send marketing about tax compliance software or related services, we will do so on a lawful basis and offer an unsubscribe. Transactional messages about a live project are not marketing.

We do not use purchased lists of individuals. We may send a single follow-up to a person who asked for a proposal and did not answer, which we consider a legitimate interest in completing a commercial conversation they began.

13. Clients, processors and HMRC

If you are an end user of software we built for another organisation, that organisation is usually the controller. You should read their privacy notice. 7LOOP LIMITED is not HMRC and cannot see your Self Assessment merely because you visited 7looplimited.cloud.

Software we deliver may connect to banks, ledgers, identity providers or HMRC-facing gateways under the client’s credentials and legal relationship. Those third parties have their own notices. We process only what the architecture and the contract allow.

We will never ask you, on this public site, for Government Gateway passwords. Anyone who does is not acting for us.

14. Automated tools in our studio

7LOOP LIMITED may use internal tools, including code assistants, to design software. We do not paste bulk personal data of your customers into public tools. Client materials stay in agreed repositories. If a future tool is used on a project, the contract and security schedule govern it.

This policy itself was prepared as a controller document for 7LOOP LIMITED and is not legal advice to you. You should take advice if you are building a competing product or appointing us as processor on a high-risk processing activity.

15. Changes

We will update this policy when our processing, vendors, or the law change in a way that you should know. The date at the top will change. Material changes affecting a live contract will also be communicated through the project channel where the contract requires notice.

Continued use of the public website after an update constitutes notice of the new policy for website visitors. Contract processing follows the contract.

16. How to contact us

Write to 7LOOP LIMITED, 74 Shopton Road, Birmingham, United Kingdom, B34 6NX. Email help@7looplimited.cloud. Telephone +44 7411 526074 during Monday to Friday, 09:00 to 17:30 Greenwich Mean Time, excluding English public holidays.

If you are writing about a data protection right, put that in the first line of the message so it is not treated as a generic sales cue. Do not attach spreadsheets of other people’s data to a rights request unless we have asked for a specific identifier.

This Privacy Policy applies to personal data processed by 7LOOP LIMITED in the course of operating 7looplimited.cloud and related business operations in the United Kingdom. Separate processing records may exist for a named client system. Those records are not published here because they would describe another organisation’s processing.

Nothing in this policy limits any right that cannot be limited under the Data Protection Act 2018 or UK GDPR. If a translation of this policy is ever issued, the English version prevails for 7LOOP LIMITED.

We keep a record of this policy version internally. If you need to know which version applied on a past date, ask help@7looplimited.cloud and cite the approximate date of your enquiry.

Birmingham is the ordinary place of business for correspondence. We do not operate a separate data protection office in another country. Supervisory authority for this controller is the Information Commissioner’s Office of the United Kingdom.

If our company number, officers or registered office change at Companies House, this operational address at 74 Shopton Road, Birmingham, B34 6NX remains the contact point stated on this website until we publish a replacement.

Thank you for reading this policy with the same care we ask you to apply when sending tax-related information. Hidden strings in data protection are held by being specific, not by being loud.

For completeness, 7LOOP LIMITED records that it does not operate a loyalty scheme, does not issue cookies that store a tax reference, and does not require facial recognition to read these pages. Those absences are deliberate. A tax compliance software studio should collect less, not more, at the brochure layer. If a future product login exists on a subdomain, that product will carry its own notice. This policy will then be updated to point to it rather than pretending the brochure and the product were always the same processing activity.

If you request access, we will search mailboxes used for help@7looplimited.cloud, the form pipeline, and any CRM we actually operate. We will not invent a CRM to look busy. If we hold nothing beyond a single email, we will say so. An access report that honestly contains little is still a valid report. You are entitled to that honesty.

When we receive a request that is clearly about a client’s end-user account in software we only built, we will direct you to that client where we are processor. We will not pretend we can see every tenant. We will not rummage in a production database to satisfy curiosity. Lawful access still goes through the controller first in that situation.

17. Categories of data subjects

We process data about website visitors, enquirers, client contacts, suppliers, professional advisers, job applicants, and, when acting as processor, end users of a client system only to the extent the client provides that data and instructs us to process it. We do not scrape social networks to build profiles of taxpayers.

If you are a journalist, academic or competitor reading this site, we still treat a contact form submission as an enquiry. We do not owe you a product demonstration, and we will not disclose client names to satisfy curiosity.

If you are a supplier sending a cold offer, we may keep your email long enough to reject it and to recognise a repeat send. That is a legitimate interest in managing a small studio’s time.

18. Detailed purposes of processing

Website operation includes serving HTML, CSS, JavaScript and images, preventing denial of service, and diagnosing broken links. Correspondence includes understanding whether a tax filing app, a compliance engine, or a mobile capture line is being requested. Pre-contract includes scoping, estimating, and saying no when the work is not a fit.

Contract performance includes design, engineering, testing, deployment support, documentation, training of client staff, warranty repair as agreed, and invoicing. Aftercare includes reading error reports, reproducing faults, and issuing patches. Corporate administration includes insurance, banking, Companies House filings, and our own tax compliance as a UK company, which is not the same as providing tax advice to you.

Dispute management includes keeping enough of a paper trail to show what was agreed, what was delivered, and what was paid. That purpose may continue after a commercial relationship ends.

We do not process personal data to decide your creditworthiness based on a visit to this website. We do not sell insights about Birmingham browsing patterns.

19. Legitimate interests assessment in outline

Our legitimate interests include running a specialised software practice, keeping the website available, preventing abuse, following up enquiries people initiated, improving the clarity of service descriptions, and protecting confidential information. We have considered the impact on individuals: visitors expect a company site to log technical data and to read a contact message. The processing is limited, not unexpected, and not used for intrusive profiling.

If you object, we will stop the processing unless we have compelling legitimate grounds or need the data for legal claims. Object by writing to help@7looplimited.cloud.

Where we could choose a less intrusive path, we do. That is why the public form asks only for name, email and message, and why email is printed as plain text rather than a harvesting-friendly link.

20. Recipients in more detail

Hosting and domain providers see IP addresses and requested URLs. Email providers see the content of messages you send to help@7looplimited.cloud. Accountants and bookkeepers of 7LOOP LIMITED see billing data. Solicitors see what we send them for advice. Insurers may see claim-related facts. Subcontractors, if used on a project, see only the materials needed for their task and are bound by confidentiality.

We do not disclose client project files to other clients. We do not publish testimonials that identify a person without permission. Portfolio narratives on this website are written to withhold confidential names where required.

If a law enforcement body makes a valid request, we will consider it under UK law and keep a record. We will not volunteer extra personal data to be helpful in a way that exceeds the request.

21. Storage locations and subprocessors of the public site

The files of this website may be served from infrastructure in the United Kingdom or from content delivery networks that cache static assets closer to the reader. Caching of public pages is not a transfer of your tax file. It is a transfer of HTML that anyone can download.

Mailbox storage for help@7looplimited.cloud is operated under a commercial provider’s terms. We review those terms when we adopt a provider. We will not list every possible future vendor in this policy because the list would become a lie as soon as a vendor changed. A current list for a live processing activity can be requested by a client under the contract.

Backups exist so that a disk failure does not destroy correspondence. Backups inherit access control and are not used as a parallel CRM.

22. Retention schedule in practical terms

Browser logs: short cycle, typically under ninety days unless an incident is open. Contact form copies in email: aligned to the enquiry retention of up to twenty-four months if no contract follows. Successful contracts: life of the relationship plus six years for financial records. Failed authentication attempts on any future client portal: short cycle. CCTV, if ever installed at 74 Shopton Road: a short cycle consistent with ICO guidance, which we would describe in a separate notice at the premises.

When retention ends, we delete or irreversibly anonymise. Anonymised statistics about how many enquiries mentioned VAT are not personal data.

If you exercise erasure during a live dispute, we may retain a locked copy for the claim. We will say so.

23. Your duties when you send data

You must not send us personal data you are not allowed to send. If you paste a spreadsheet of employees into the message field, you may breach your own obligations. We may refuse the message, delete it, and tell you to use a proper channel.

If you include special category data about a third party, we may treat it as received in error. Do not test us with shock content. Abuse of the form may be reported.

If you are a controller appointing us, you must ensure you have a lawful basis to give us the data, and you must not instruct us to process in a way that would make us breach UK GDPR. We can say no.

24. Joint controllers

We do not generally act as joint controller with visitors. A joint controller arrangement, if ever needed with a partner studio, would be documented and summarised to affected people as required by Article 26 UK GDPR.

Google may be an independent controller of data it receives when you load Maps or Fonts. That is not a joint controller relationship with 7LOOP LIMITED merely because a page contains an iframe or a stylesheet link.

25. Data protection by design in our delivery work

When we build tax compliance software, we encourage minimisation, role-based access, audit logs, and retention that matches the client’s legal duties. Those features are deliverables under a contract, not promises to every website reader. A public brochure cannot certify a private system.

We will not claim that a product is ‘GDPR certified’ because no such general certification is what clients think it is. We will talk about concrete controls.

If a data protection impact assessment is required for a client system, the client usually leads it. We will supply technical descriptions we can stand behind.

26. Breach handling

If we become aware of a personal data breach affecting data we control, we will assess risk to individuals without undue delay, record the facts, and notify the ICO within seventy-two hours where required. High-risk events lead to communication to individuals in clear language.

If we are a processor, we will notify the client without undue delay after becoming aware, with facts we have at that time, and update as we learn more. We will not delay a notice in order to finish a marketing sentence.

You can help by reporting suspected misuse of our domain, spoofed email, or unexpected requests for Government Gateway credentials.

27. Records of processing

7LOOP LIMITED maintains internal records of processing activities proportionate to a company of our scale, covering purposes, categories, recipients, transfers, retention and security measures. Those records are not a public wiki. Supervisory authorities may inspect them as the law allows.

If you want a copy of the record that concerns only you, that is an access request, not a demand for our entire Article 30 file.

28. Children’s data and age

Our services are for adult professional use. We do not knowingly design tax filing app development for children. If a school or family product is ever commissioned, it will have its own notice. Until then, do not submit data about children through the public form.

29. Third-party sites

This website may mention HMRC, Companies House, the ICO, or banks as part of explaining digital tax solutions. Links or mentions are not endorsements and not a transfer of your data by us until you choose to visit those organisations. Read their notices.

We are not responsible for the privacy practices of sites we do not control.

30. Language, jurisdiction and miscellaneous

This policy is issued in English. The courts of England and Wales have jurisdiction over disputes about this policy as a statement of 7LOOP LIMITED’s practices, without prejudice to your right to complain to the ICO.

If a provision of this policy is held unenforceable, the remainder continues. Failure to enforce a provision is not a waiver. Headings are for reading comfort.

For the avoidance of doubt, providing tax compliance software is not the same as acting as a data broker, credit reference agency, or government department. We hold hidden operational strings for software delivery. We do not hold the state’s strings.

If you have read this far, you already know how to reach us: help@7looplimited.cloud, +44 7411 526074, 74 Shopton Road, Birmingham, United Kingdom, B34 6NX. That is the whole of the public contact surface on purpose.