Version: 202309-1; last updated 18 September 2023
At Tax Agile Limited we are committed to protecting your personal information and your right to privacy. This policy contains an explanation of how we handle your personal data and your rights in relation to that data.
Information we collect
There some strictly necessary cookies we use in order to handle your login as well as analytical tracker cookies which help us understand behaviour and trends.
Our cloud platform requires a minimum amount of data for you to gain access, just a name (first name, last name) and an email address. We use Google Authentication as part of Google Cloud Platform, and this requires an email address as a username.
This email address is used exclusively for account-related matters and to communicate essential service notifications, for example to receive a password reset link.
When using the HMRC MTD VAT solution within our platform, we are required to capture data from your local machine and forward this information to HMRC as part of the VAT Return submission. The data we are required to collect is listed on the HMRC website.
Anonymised usage data
We use a tool that helps us understand our users and how they experience our application, it does this by capturing data from your browser and anonymising it before Tax Agile is able to view their reports.
The Tax Agile platform’s primary purpose is to process financial documents, and data provided is processed on our platform. For VAT Calc and VAT Advisor, a user may choose to make anonymous requests, and we don’t store these requests unless explicitly requested to.
For our VAT Auditor and VAT Filer products, batches of transaction data are loaded either over our API or via the browser interface; and this transaction data is all stored. In addition, you will have setup details of Companies within our application, including names, addresses and tax identification details.
Data transfer and storage
Information is passed around our application encrypted, using HTTPS with TLS 1.3 to ensure your data remains private during transmission and encrypted when stored.
Our platform uses infrastructure services provided by Google Cloud Platform, and we specify that our services are running the European region ‘eu-west1’ which is located in Belgium. Data will transit from your location to our platform encrypted, and we do not move the data off the platform into any other location.
Only our operations team have the authority to access client data stored on our platform, and this is strictly governed by a least privilege permissions scheme, the data cannot be accessed by all, and if client data is accessed, it is on our secure infrastructure and not copied to local computers.
We do not sell, share, or otherwise distribute your data to any third parties.
With the exception of, necessary data storage on Google Cloud Platform and when you use sharing features of our product, for example, sharing a transaction, submitting a return, or sending an electronic invoice.
We retain your data until you choose to delete it or terminate your contract with our service.
Under UK and EU law, you have the right to access, correct, or delete your personal data. Additionally, you can object to our processing of your personal data, ask us to restrict processing of your personal data, or request portability of your personal data.
To exercise any of these rights, please contact us. We will respond to your request within a reasonable timeframe and in accordance with the law.