Privacy policy

QuickTaxFiler Limited (“QuickTaxFiler”, “we”, “us”, “our”) is a company registered in England and Wales, company number 11471794, with its registered office at 124 City Road, London, EC1V 2NX. We are registered with the Information Commissioner’s Office (ICO), registration reference ZA813484, as a data controller under UK data protection law (the UK GDPR and the Data Protection Act 2018).

This policy explains what personal data we collect through the QuickTaxFiler Self Assessment software, why we collect it, how long we keep it, who we share it with, and the rights you have over it.

This environment is a local recreation. Account and tax-return data you enter here is stored only in your browser’s local storage and a local database on this machine — it is never transmitted to QuickTaxFiler Limited or to HMRC. The sections below describe how personal data is handled on the live QuickTaxFiler service so this policy can be reviewed as it will appear in production, including for HMRC application review.

We collect the following categories of personal data:

• Account details: name, email address, and a securely hashed password.
• Tax return data: the figures and answers you enter to prepare a Self Assessment return, including income, expenses, reliefs, Unique Taxpayer Reference (UTR) and National Insurance number.
• Government Gateway credentials: your HMRC user ID and password, entered only at the point of submission and used solely to authenticate that submission with HMRC.
• Billing information: processed by our payment provider; we retain a record of the package purchased and the transaction reference, not full card details.
• Usage and device data: pages visited, session activity, browser type and IP address, used for security, analytics and service improvement.
• Support correspondence: anything you send us by email or in-app chat.

• To create and administer your account and save your progress between sessions.
• To calculate your Income Tax, National Insurance and any reliefs due, and to prepare your SA100 and supplementary pages.
• To authenticate and transmit your return to HMRC when you choose to submit online.
• To provide an Assisted-package tax adviser review where you have requested one.
• To process payment for filing credits and send receipts.
• To respond to support requests and communicate service or security updates.
• To detect, investigate and prevent fraud, misuse and security incidents.
• To meet our own legal and regulatory obligations, including HMRC recognition and audit requirements.

• Contract: processing needed to provide the account and filing service you sign up for.
• Legal obligation: record-keeping required by tax and company law.
• Legitimate interests: keeping the service secure, preventing fraud, and improving the product, balanced against your right to privacy.
• Consent: where we ask separately, for example for marketing email.

Your Government Gateway user ID and password are used only to sign the specific submission you authorise, over HMRC’s API, at the moment you click submit. We do not use these credentials for any other purpose and do not sell or share them with anyone other than HMRC as part of that submission.

In this local recreation, no credentials are sent anywhere — submission is simulated so you can exercise the same validation checks as the live product.

We share personal data only where necessary, and always under a written agreement:

• HMRC — to submit your Self Assessment return, using the credentials and figures you provide.
• Payment processors — to take payment for filing credits.
• Cloud hosting and infrastructure providers — to store and run the service securely.
• Qualified tax advisers engaged by QuickTaxFiler — only where you request an Assisted-package review, and only the return data needed for that review.
• Regulators, law enforcement or professional advisers where we are required to by law, or to establish, exercise or defend legal claims.

We do not sell personal data.

We retain account and return data for as long as your account is active, and for six years after the end of the tax year to which a submitted return relates, in line with HMRC record-keeping requirements. You can ask us to delete your account and personal data at any time, subject to these retention obligations. Payment records are kept for as long as required by accounting and tax law.

Under UK data protection law you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data, where we are not required to keep it.
• Ask us to restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.
• Complain to the Information Commissioner’s Office (ico.org.uk) if you believe your data has been mishandled.

To exercise any of these rights, email support@quicktaxfiler.co.uk.

We use encryption in transit, hashed and salted passwords, access controls limiting staff access to personal data on a need-to-know basis, and regular security review of the systems that handle Self Assessment data. No online service can guarantee absolute security, but we work to reduce risk and to detect and respond quickly to any incident.

The live site uses essential cookies to keep you signed in, and analytics cookies to understand how the service is used and to improve it. You can control non-essential cookies through the cookie banner shown on first visit and through your browser settings. This demonstration environment uses browser local storage instead of tracking cookies.

Personal data is hosted within the UK or European Economic Area. Where a service provider is located outside the UK, we put appropriate safeguards in place, such as the UK International Data Transfer Addendum, before any transfer takes place.

We may update this policy as the service changes or to reflect new legal requirements. Material changes will be signposted in-app or by email. The date at the top of this page shows when it was last revised.

Questions about this policy or your personal data can be sent to support@quicktaxfiler.co.uk, or by post to QuickTaxFiler Limited, 124 City Road, London, EC1V 2NX.