Privacy Policy

1. What data we collect

The data we collect depends on how you use TaxClvr. This may include:

• Account data: name, email address, password (hashed), login metadata, and subscription status.
• Contact and support data: messages you send us and any attachments you provide.
• Financial record data you enter or import: sales invoices, purchases/expenses, categories, totals, and notes.
• Bank/transaction import data: transactions imported via CSV/Excel or via bank feed connections (where enabled).
• Tax-related data: income sources (e.g., employment, dividends, interest, pensions, self-employment, property), allowances/reliefs you enter, and calculated outputs (e.g., estimated tax position).
• Technical data: device/browser data, log data, and performance diagnostics (subject to cookie preferences where applicable).

Please do not submit information that is not relevant to using the Services.

2. How we use your data

We use personal data to:

• Provide, operate, and maintain the Services.
• Create and manage your account and authenticate access.
• Process imports (e.g., bank feeds, CSV/Excel) and generate summaries and calculations.
• Show an estimated tax position based on the data you provide.
• Provide customer support and respond to enquiries.
• Improve performance, reliability, and security, and prevent fraud/abuse.
• Send service notices (e.g., important updates, security notices, billing-related messages).

3. Legal bases (UK GDPR)

We process your personal data under one or more of the following legal bases:

• Contract: to provide the Services you sign up for and operate your account.
• Legitimate interests: to secure our services, prevent abuse, and improve performance (balanced against your rights).
• Legal obligation: where we must comply with applicable laws (e.g., accounting, tax, or regulatory requirements).
• Consent: for certain cookies/analytics and optional communications where required.

4. Bank feeds and third-party providers

If you connect a bank feed, we may receive transaction data and related identifiers from the relevant provider to display transactions and help you maintain digital records. We do not receive your online banking password.

Third-party providers may process data on our behalf (as processors) to deliver core functionality such as infrastructure hosting, email delivery, logging, and payment processing.

5. Cookies and tracking

We use cookies and similar technologies to run the site and, where enabled, to analyse usage and improve performance. You can manage cookie preferences on our cookie policy page.

See: Cookie Policy

6. How we share data

We may share personal data in limited situations:

• Service providers: hosting, payment processors, communications, logging, and support tooling used to provide the Services.
• Legal and compliance: if required by law or to respond to lawful requests.
• Business changes: in the event of a merger, acquisition, or sale of assets (with appropriate safeguards).

We do not sell your personal data.

7. International transfers

If any service providers process data outside the UK, we use appropriate safeguards such as UK International Data Transfer Agreements, addendum clauses, or other lawful transfer mechanisms as required.

8. Data retention

We retain personal data only as long as needed to provide the Services, meet legal obligations, resolve disputes, and enforce agreements. You may request deletion subject to applicable legal and operational requirements.

9. Security

We use appropriate technical and organisational measures to protect your data, including access controls, encryption in transit where available, and security monitoring. No method of transmission or storage is 100% secure, but we work to protect data against unauthorised access.

10. Your rights (UK GDPR)

Depending on your circumstances, you may have the right to:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Request deletion of your data.
• Restrict or object to certain processing.
• Request portability of data you provided to us.
• Withdraw consent where processing is based on consent (e.g., optional analytics cookies).

To exercise your rights, contact: privacy@taxclvr.co.uk.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

11. Children

The Services are not intended for children, and we do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. Updates will be posted on this page and the “Last updated” date will change.

13. Contact