Privacy policy
Last updated 29 October 2026. This policy explains how [YOUR LEGAL NAME OR COMPANY NAME] (“we”, trading as MTD Software) uses personal data on mtd-software.co.uk. We are the data controller. Contact: [CONTACT EMAIL], [BUSINESS ADDRESS].
Your bank figures
The calculator runs in your web browser. The bank entries and categories you paste or type are processed on your device and are not sent to or stored on our servers. They are cleared when you close or refresh the page unless you download a backup file with “Save my data”, which is saved on your own device. You are responsible for keeping that file secure.
What we do collect
- Browser storage: your Cost of Sales Adjustments list is saved in your browser (local storage) so it is there next time. It stays on your device, and you can clear it with the Clear list button or by clearing site data.
- Payment and subscription details: when you subscribe, payment is handled by our payment provider, Stripe. We receive your name, email, subscription status and payment confirmation. We do not see or store your full card number.
- Messages: if you email us, we keep your message and our reply.
- Server logs: our web host may record technical data such as IP address and pages requested for security and operation.
We do not use advertising cookies. [If you add analytics or other cookies later, describe them here and add a consent notice.]
If you submit to HMRC through MTD Software
Where this feature is enabled, you can sign in with your email address and send the summary totals you have approved to HMRC. Your individual bank entries still stay in your browser. For this feature we store, on servers provided by our database provider, Supabase: your email address, your National Insurance number, the connection (tokens) that lets us act for you at HMRC, and a record of each submission (the totals sent, the date and HMRC’s reference). Your National Insurance number and HMRC tokens are stored encrypted. You can disconnect from HMRC in your account at any time, which deletes the stored connection. We keep submission records for as long as the law and HMRC’s requirements need, then delete them. HMRC, Stripe and Supabase process data for us or for you as described in their own privacy notices. [State Supabase’s hosting region and retention periods.]
Why we use it and for how long
We use payment and contact data to provide the service, take payment, answer questions, meet legal and accounting duties, and prevent fraud. Our legal bases are contract, legitimate interests and legal obligation. We keep accounting records for the period the law requires, and other data only as long as needed.
Sharing
We share data only with providers who help us run the service, such as Stripe and our web host, or where the law requires. We do not sell personal data.
Your rights
Under UK GDPR you may ask to access, correct or delete your data, restrict or object to its use, and request a copy in a portable format. Email [CONTACT EMAIL]. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Changes
We may update this policy and will change the date above when we do.