This Privacy Policy for Taxpad Ltd (‘we’, ‘us’, or ‘our’), describes how and why we might access, collect, store, use, and/or share (‘process’) your personal information when you use our services (‘Services’), including when you:

• Visit our website at www.taxpad.co.uk, or any website or application of ours that links to this Privacy Policy
• Engage with us in other related ways, including any emails, phone conversations or meetings

We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us by email at [email protected].

What personal information do we process?

When you use our web service, we may ask for personal information including your name, address, email, phone number etc. This is used only to provide the services you use, to bill you and collect payment for those services and to communicate with you. We do not process sensitive personal information. We do not collect any information from third parties. If you use our application to send or retrieve data to or from HMRC, we collect some data from your browser which is required by HMRC for fraud prevention. This includes: your browser type, the size and colour capacity of your screen, your IP and port address and your timezone. This information is passed to HMRC as required by law but we do not retain it.

What legal reason do we rely on to process your information?

The UK General Data Protection Regulation (GDPR) requires us to explain the legal bases we rely on in order to process your personal information, as follows:

• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfil our contractual obligations to you.
• Consent. We may process your information if you have given us permission (i.e. consent) to use your personal information for a specific purpose.
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations.
• Legitimate Interest. We may process your information for business or logistical reasons, such as for streamlining invoice processes or helping to prevent abuse of our software or systems.

How safe is your personal data?

We have organisational and technical processes and procedures in place to protect your personal information. However no technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

With whom do we share your personal data?

• All payment data is handled and stored by our payment provider Stripe. You may find their privacy notice here: https://stripe.com/gb/privacy.
• When our automated systems send emails to you (e.g. for confirming your email address or sending you invoices etc) our email services provider TWILIO SENDGRID will handle the delivery of emails. They do not retain the emails once they have been sent to you, but they may retain email addresses for up to 37 days for audit and delivery tracking purposes. Their data protection policy is here: https://www.twilio.com/en-us/legal/data-protection-addendum .
• As described above, when you use Taxpad to read or submit data to or from HMRC we pass on some data from your browser. This is a legal requirement.
• We do not pass your personal data to any other parties. In future we may share information in specific situations, such as with a parent or subsidiary company or a service provider. If and when this happens this privacy policy will be updated and you will be informed via email.

How can you see the personal data we hold about you?

You can view and amend all the information we hold about you in your online account. Your personal information is available to be viewed and edited even if you do not have a current licence. If you wish us to delete your account, please contact us.

Updates to this policy

Updates to this policy that may be made from time to time will be notified to all our active users via email. It is your responsibility to ensure that the contact information we have on file for you is correct and up to date. You can review this information via the application.