Legal
Privacy Policy
This Privacy Policy explains how qwartly handles personal data for its MTD bridging software service and related marketing, support, billing, and compliance activities.
1. Who we are
qwartly operates this service. You can contact us at hello@qwartly.co.uk.
2. What data we collect
- Account details such as your name, email address, password hash, and marketing preferences.
- Tax workflow data such as NI number, spreadsheet financial data, HMRC submission records, saved mappings, business profiles, and reminder preferences.
- HMRC OAuth tokens and HMRC fraud-prevention headers used to access the MTD API securely.
- Billing and subscription information processed through Stripe. We do not store your full card details.
- Cookie consent records and your Google Ads conversion-tracking preference.
3. Purposes and legal bases
- Contract performance: account access, spreadsheet processing, submissions to HMRC, and billing support.
- Legal obligation: retaining tax and fraud-prevention records where required for compliance.
- Legitimate interests: service security, abuse prevention, audit logging, and operational troubleshooting.
- Consent: marketing emails and optional Google Ads conversion tracking.
4. Third-party processors
- HMRC for Making Tax Digital API access and submission processing.
- Stripe for payments, invoicing, and subscription administration.
- Brevo for transactional and marketing email delivery.
- Google for optional Google Ads and gtag conversion measurement.
- Infrastructure and hosting providers that support deployment, security, and service availability.
5. Data retention
- Active account profile data is retained while your account is open. If you close your account, the live sign-in record is anonymised immediately and an anonymised account row may be retained for compliance and systems integrity.
- HMRC access tokens: deleted when you disconnect your HMRC account.
- Audit logs and compliance records: retained for up to 6 years, then deleted automatically.
- Spreadsheet uploads, validation snapshots, saved mappings, business profiles, notification preferences, and sent reminder records: retained until you delete them, they expire automatically, or you close your account.
- Validation snapshots: up to 7 days, then automatically deleted.
- Submission records, final declarations, and subscription or billing history: retained where required by tax, accounting, anti-fraud, or legal obligations, including after account closure.
- Cookie consent logs: retained as compliance evidence.
- Waitlist records: until launch, unsubscribe, or a shorter lawful retention need applies.
6. Your rights
You can ask for access, rectification, erasure (subject to legal retention requirements), restriction, portability, objection, or withdrawal of consent. Contact hello@qwartly.co.uk to exercise these rights.
7. International transfers
qwartly is designed for UK and EEA processing. Where Stripe, Brevo, or Google involve transfers outside the UK or EEA, we rely on appropriate safeguards such as standard contractual clauses or equivalent measures.
8. Automated decision-making
qwartly does not make decisions about you using solely automated processing that produce legal or similarly significant effects.
9. Cookies
- Essential cookies, including csrf_token and refresh_token, are used to keep sign-in and session security working.
- Optional Google Ads / gtag conversion tracking loads only after you opt in through the cookie banner or cookie preferences controls.
- You can revisit your choice at any time through Cookie Preferences on the site-wide legal bar or footer.
10. Your right to complain to the ICO
If you are unhappy with how we handle your personal data, you can complain to the Information Commissioner's Office at ico.org.uk.
11. Changes to this policy
We may update this Privacy Policy to reflect legal, operational, or product changes. Last updated: 6 March 2026. Material updates will be highlighted by email or an in-product notice where appropriate.
12. Contact
For privacy questions, rights requests, or complaints, email hello@qwartly.co.uk.