Privacy Policy

InvoicePad UK is built so that your invoice details never leave your device. This page explains exactly what we do — and do not — collect, why, and the rights you have under UK data protection law.

Last updated 23 September 2026 No account needed

The short version

InvoicePad UK has no server-side database, no account system and no analytics. The invoice you build is created and stored entirely inside your own web browser. We do not upload it, we cannot read it, and we do not send it anywhere. The only thing we ever keep on your device is a local draft of the invoice you are working on — and only so you can come back to it later.

The one part of the site that can involve a third party is advertising. Advertising scripts and cookies only load after you explicitly agree, and rejecting them changes nothing about how the tools work.

Who we are (data controller)

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, InvoicePad UK is operated by an individual developer based in the United Kingdom, acting as the data controller for the limited processing described on this page.

Where we use third-party processors (currently our hosting provider and, only if you consent, Google as an advertising partner), we have data-processing arrangements in place with them and they act on our documented instructions. We do not sell your personal data to anyone, and we never exchange it for anything of value.

What we collect

Invoice contents

Everything you type into an invoice — names, addresses, line items, amounts — is processed locally by JavaScript running in your browser. It is never transmitted to InvoicePad UK or any other server. When you download a PDF, the file is generated on your device and saved by your browser; it is not emailed to us.

Local draft (browser storage, not a cookie)

As you type, the current invoice is saved to your browser's local storage under the key invoicepad_draft, and the last invoice number you used is stored under invoicepad_last_invno. These are small text entries kept on your device by your browser — they are not cookies and we cannot read them remotely. The draft stays on your device until you click “Start over” or clear your browser data.

When you choose, hide, or accept or reject advertising on the cookie banner, we record that choice on your device (local storage key invoicepad_consent) so we don't ask you on every page. The record contains the choice and a timestamp only. Your choice is re-requested after 12 months, as recommended by the Information Commissioner's Office (ICO).

Server logs

Our hosting provider (Vercel) records standard request logs — such as the page requested and the IP address it came from — so we can keep the site running and protect it from abuse. These logs are kept briefly and are not used for advertising or profiling. They never contain the contents of any invoice.

Cookies and local storage

We do not set any cookies of our own. The invoice draft and your consent choice live in your browser's local storage (see above), which is a different technology. Cookies on this site are set only by our advertising partner (Google AdSense), and only after you have consented.

  • Local storage (always on, no consent needed) — stores your invoice draft and the last invoice number on your device. This is necessary for the tool to work as you expect, and it contains no tracking or advertising use.
  • Consent record (always on, no consent needed) — stores whether you accepted or rejected advertising cookies, so we can honour your choice. It is kept on your device and re-asked after 12 months.
  • Advertising cookies (only with your consent) — if you accept, Google AdSense may store cookies to personalise the ads shown and to measure their performance. These are the only cookies that involve a third party, and they are not set unless you accept.

You can change your mind at any time by opening Cookie settings in the footer, which shows the banner and lets you choose again.

Why we process this (legal bases)

Under UK GDPR, every use of personal data needs a lawful basis. We rely on these:

  • Contract / taking steps at your request (Article 6(1)(b)) — for storing your invoice draft on your device so the tool you asked for works.
  • Consent (Article 6(1)(a) and PECR Regulation 6) — for advertising cookies. You can withdraw this consent at any time via the “Cookie settings” link in the footer.
  • Legitimate interests (Article 6(1)(f)) — for keeping the site secure and operational through brief, non-profiled server logs, which is in our interests and yours, and which we weigh against your right to privacy.

Analytics

We do not run any analytics or tracking scripts. If we ever add anonymised, consent-based analytics in future, it will only load after you have accepted non-essential cookies, and this policy will be updated first.

Advertising and your data

To keep the tools free, we may display advertising through Google AdSense. AdSense may use cookies and similar technologies to serve ads based on your prior visits to this or other sites — but only after you accept advertising cookies on the banner.

Google is an independent data controller for the data it collects via AdSense. Its use of advertising cookies is governed by the Google Ads Privacy & Terms. You can review or turn off personalised advertising through Google Ads Settings, and you can opt out of some third-party vendors’ cookies at aboutads.info.

International transfers

InvoicePad UK is hosted by Vercel, whose content and edge network operates in several countries including the United States. The brief server logs described above may therefore be processed outside the UK. Vercel relies on appropriate safeguards (currently the UK-approved International Data Transfer Agreements / Addendum) for such transfers.

If you consent to advertising, Google may transfer data for ad personalisation outside the UK; Google relies on the UK extension to the EU-US Data Privacy Framework and related safeguards for those transfers.

How long we keep things

  • Invoice draft and last invoice number — kept on your device until you clear them (via “Start over” or browser settings). We cannot delete them for you because we never see them.
  • Consent record — kept on your device until you change your choice, but we re-ask after 12 months.
  • Server logs — retained briefly (Vercel’s standard retention) for security and operations, then deleted.

Your rights under UK GDPR

Under the UK GDPR you have the right to:

  • Be informed about how your data is used (this page);
  • Access the personal data we hold about you — in practice, we hold none of your invoice data;
  • Request correction or erasure of your data;
  • Restrict or object to processing in certain circumstances;
  • Receive your data in a portable format;
  • Withdraw consent for advertising cookies at any time, as easily as you gave it;
  • Lodge a complaint with the Information Commissioner's Office (ICO).

Because invoice data never leaves your browser, the most direct way to exercise most of these rights is to clear your browser's local storage and cookies for this site. You can withdraw advertising consent at any time via “Cookie settings” in the footer.

Children

This site is a business tool intended for adults and is not directed at children under 13. We do not knowingly collect data from children.

Contact

InvoicePad UK is operated as a free resource for UK freelancers and sole traders. For any privacy question, to change your consent, or to exercise any of your rights, contact us at privacy@invoicepad-uk.co.uk.

Changes to this policy

We may update this policy as the site evolves. The “Last updated” date at the top reflects the current version. If a change materially affects how your data is handled, we will say so on the site and re-ask for consent where the law requires it.

This policy is general information and not legal advice. For further guidance, see the Information Commissioner's Office.