← Back to CabTax

Privacy Policy

Last updated: July 2026

CabTax Limited ("CabTax", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

CabTax Limited is a company registered in England and Wales. We are the data controller responsible for your personal data when you use the CabTax application.

Data Controller: CabTax Limited
Contact: hello@cabtax.app
Website: cabtax.app

2. What Personal Data We Collect

We collect the following categories of personal data when you use CabTax:

CategoryExamples
Identity dataFull name, date of birth
Contact dataEmail address, phone number, postal address
Tax dataUTR number, National Insurance number, income, expenses, mileage, capital gains, charitable donations, pension contributions (including amounts you enter for previous tax years), and loss records from previous tax years
Financial dataSubscription payment details (processed securely via Stripe — we never store card numbers)
HMRC connection dataOAuth tokens linking your account to HMRC, if you choose to connect
Technical dataIP address, device type, app usage data

3. Why We Process Your Data — Our Lawful Basis

Under UK GDPR Article 6, we rely on the following lawful bases to process your personal data:

  • Contract — we process your data because it is necessary to provide the CabTax service you have subscribed to, including calculating your tax liability and generating your Self Assessment summary.
  • Legitimate interest — we process certain data to improve our service, prevent fraud, and maintain the security of our platform.
  • Consent — where you choose to connect CabTax directly to HMRC via OAuth, we process this only with your explicit consent, which you may withdraw at any time.
  • Legal obligation — we may retain certain records to comply with UK tax and accounting law.

4. How We Use Your Data

  • To calculate your Income Tax, National Insurance and Capital Gains Tax liability
  • To generate your SA100 Self Assessment summary
  • To track your Making Tax Digital (MTD) quarterly obligations
  • To process your subscription payment via Stripe
  • To send you service-related communications (deadline reminders, account notifications)
  • To provide customer support when you contact us
  • To connect to HMRC's MTD API on your behalf, where you have given consent

5. Who We Share Your Data With

We do not sell your personal data. We share data only with the following trusted parties, strictly to deliver the CabTax service:

Third PartyPurposeData Location
Base44Application hosting and database storageEuropean Economic Area (EEA)
SupabaseSecure storage of audit logs and identity verification (KYC) documentseu-west-3 (Paris, France — EEA)
StripeSecure payment processing — we never see your card detailsEEA / UK
HMRCOnly if you connect your account, to submit MTD quarterly returns and retrieve your tax calculationsUnited Kingdom
Google Analytics & Meta (Facebook)Only if you consent via our cookie banner, and only on our public marketing website: limited technical data about your visit (pages viewed, approximate location, device type, online identifiers) to help us understand website performance and measure advertising. We never share your name, contact details, tax information, or anything you enter inside the CabTax app. Meta acts as a joint controller for some of this processing. Legal basis: consent (UK GDPR Art. 6(1)(a)), withdrawable at any time — see our Cookie Policy.May include United States (UK–US Data Bridge)

6. How We Protect Your Data

  • All data is encrypted in transit (HTTPS) and at rest
  • Row Level Security (RLS) ensures each user can only access their own data
  • Payment details are handled entirely by Stripe — never stored on our servers
  • HMRC OAuth tokens are stored securely and never exposed to other users

7. How Long We Keep Your Data

We retain your data for as long as your account is active, and for up to 6 years afterwards to comply with HMRC record-keeping requirements for tax purposes. You may request deletion of your data at any time via the "Clear All Data" option in your Profile, subject to our legal retention obligations.

8. Your Rights Under UK GDPR

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — correct inaccurate data
  • Erasure — request deletion of your data, subject to legal retention requirements
  • Portability — receive your data in a portable format (CSV/PDF export available in-app)
  • Object — object to certain types of processing
  • Withdraw consent — disconnect your HMRC connection at any time

To exercise any of these rights, contact us at hello@cabtax.app.

9. Data Breach Notification

In the event of a personal data breach, we will notify the Information Commissioner's Office (ICO) within 72 hours of becoming aware of it, in accordance with UK GDPR requirements. Where the breach poses a risk to your rights and freedoms, we will also notify you directly without undue delay.

Security incidents can be reported to:
🔒 support@cabtax.app

10. International Data Transfers

Your data is stored and processed within the United Kingdom and the European Economic Area (EEA). Specifically:

  • Application data is hosted by Base44 within the EEA
  • Audit logs and identity verification documents are stored by Supabase in eu-west-3 (Paris, France) — within the EEA, meaning no Standard Contractual Clauses are required for this data
  • Payment processing is handled by Stripe under appropriate UK GDPR safeguards

We do not transfer your personal data outside the UK or EEA without ensuring appropriate safeguards are in place. The only exception is optional analytics data described in section 5, which may be processed by Google and Meta in the United States under the UK Extension to the EU-US Data Privacy Framework (the "UK–US Data Bridge"), which the UK Government recognises as providing adequate protection — and only where you have given consent.

11. Cookies

Our website uses essential cookies required for the site to function, plus — with your consent only — analytics and advertising cookies on our public marketing pages. No analytics or advertising cookies are used inside the CabTax application itself. Full details, including how to accept, reject, or withdraw consent, are in our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

13. Complaints

If you have concerns about how we handle your personal data, please contact us first at hello@cabtax.app. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

14. Contact Us

CabTax Limited

📧 General enquiries: hello@cabtax.app
🔒 Security & support: support@cabtax.app
💳 Payments & billing: payments@cabtax.app
🌐 cabtax.app