Privacy Policy
This Privacy Policy explains how AB & CO ACCOUNTING & TAX SERVICES may collect, use, retain and protect personal information submitted through this website and the Leaving UK Tax Checker.
Last updated: 14 October 2026
Information we collect
We may collect and process the following categories of personal information when you use our website and the Leaving UK Tax Checker: • Account registration information, including your email address, first name and last name. • Information you enter into the tax assessment, including details about your UK tax circumstances, income, property, pensions, investments, UK and overseas income, and related matters. • Payment information, which is processed through our payment provider, Stripe. We do not store your full card details on our servers. • Technical data such as your IP address, browser and device type, collected automatically when you use the website — including through the requests your browser makes to load our typefaces (see 'Fonts loaded from Google') and through the traffic measurement described under 'Cookies and tracking'. • Usage records we keep ourselves, showing which parts of the service have been used — for example, that a tax check was started, completed or a results page was viewed — together with a reference to the relevant tax check or product. These usage records do not contain the content of your answers or your payment details. Separately, we keep audit records of each calculation we carry out for you, and those do hold the answers that calculation used; see 'Data retention' for how they are handled and when the answers are removed from them. Some of the information you enter is financial in nature, such as income, property values, capital gains, and pension and rental amounts. We ask only for what the assessment needs. We do not ask you for your bank account details, your National Insurance number or your card details. Card payments are made on Stripe's own payment page, so your card details are entered there and do not pass through this website.
How we use your information
We use the information you provide to: • Deliver the requested tax assessment or report. • Administer your account. • Process payments through Stripe. • Respond to enquiries you submit to us. • Maintain records for accounting, tax and audit purposes as required by law. • Improve our website and services. Your assessment answers are used to generate your personalised automated tax report. We do not use your personal information for automated decision-making that produces legal or similarly significant effects. The tax assessment report is an automated analysis based on the information you provide — it is not a manual review by a tax professional.
Lawful basis for processing
We process your personal information under the following lawful bases: • Performance of a contract: to deliver the tax assessment or report you have purchased. • Legal obligation: to retain accounting and tax records as required by UK law. • Legitimate interests: to keep the service secure, to prevent fraud and misuse, to answer enquiries you send us, to display the website's typefaces, and to understand how the service is used so that we can improve it. We do not use your information for advertising and we do not build advertising profiles of you. • Consent: where we ask for your permission before carrying out optional processing.
Third-party processors
We use the following third-party services to operate the Leaving UK Tax Checker. Each processor handles personal data in accordance with its own privacy and security standards: • Base44 — provides hosting, database storage, authentication and application infrastructure. Your assessment data, account information and payment records are stored on Base44's platform. • Google Fonts (Google LLC) — provides the typefaces used on this website. See 'Fonts loaded from Google' below. • Stripe — processes payments. Stripe handles your card details directly; we do not store full card details on our servers. • AI/LLM providers — the narrative sections of your automated tax report are drafted by an AI model, called through our hosting platform's AI service. The platform selects the model; we do not contract a specific AI provider ourselves and we do not train any model on your information. The information sent is your assessment answers and the figures calculated from them. It does not include your name, your email address, your payment details or your card details. The vendors that may handle data under our hosting platform are listed in that platform's subprocessor directory (see 'International data transfers'). • Email services — may be used to send you account-related communications such as password reset emails. We do not sell your personal information to third parties.
Fonts loaded from Google
The typefaces used on this website (Fraunces and Inter) are loaded from Google Fonts, a service provided by Google LLC. The font files are requested from fonts.googleapis.com and fonts.gstatic.com. Every page of this website requests these font files directly from Google, including pages you view before you sign in, start an assessment, or give us any information. In doing so, Google receives your IP address and information about your browser and device, together with the address of the page you are viewing. Google states that this information is used to serve the fonts and is not used to build advertising profiles. We do not receive this information ourselves, and it is not used by us for advertising or marketing. Google LLC is based in the United States, so this request involves the transfer of that technical information outside the United Kingdom, and Google's own privacy terms apply to it. See 'International data transfers' below for how we approach transfers generally.
International data transfers
Some of our third-party processors (including Base44, Stripe, Google (for the website fonts) and AI/LLM providers) may process personal data outside the United Kingdom. Where this occurs, appropriate safeguards are in place to protect your personal information, such as: • Standard Contractual Clauses or equivalent transfer mechanisms where required. • The processor's own compliance with applicable data protection laws. Our hosting platform's servers are currently located in the United States. The platform publishes a Data Processing Agreement (base44.com/dpa) and a directory of its subprocessors in its Trust Center (trust.base44.com), and states that the vendors handling personal data are bound by data processing agreements covering transfers to the United States using approved transfer mechanisms such as Standard Contractual Clauses or the Data Privacy Framework where applicable. You can ask us for information about the safeguards that apply to a particular processor. • Encryption of data in transit and at rest. You may contact us using the details below if you would like further information about the specific safeguards applied to international transfers.
Data retention
We retain your personal information only for as long as necessary, based on the purpose for which it is held and our legal obligations: • Account information: retained while your account is active. Closing an account is handled by us rather than by a self-service option; if you ask us to close yours, we will do so and your account information will be deleted or anonymised 12 months after closure, unless a longer period is required for legal reasons. Deleting your tax check data yourself, as described below, does not close your account. • Tax assessment answers and reports: retained while your account is active, so that you can return to your report and keep it up to date. After that we keep them only where we need to: to answer a query you raise, to meet our legal and regulatory obligations, and to deal with any legal claim, which in practice means no longer than 6 years, reflecting the record-keeping requirements that apply to HMRC matters and the limitation periods under the Limitation Act 1980. You can ask us to delete your assessment data at any time, and we will delete it; the anonymised payment and audit records described below are retained for their legal period. • Payment records: retained for 6 years from the date of payment, as required by accounting and tax law (including the Companies Act 2006 and HMRC requirements). After this period, payment records are deleted or anonymised. • Audit trail records: retained for 6 years for audit and security purposes. They record the facts of each calculation we carried out for you: the type of calculation, the tax year, the rule version, the date, the answers it used, and for a report generation whether it succeeded or failed. If you ask us to delete your data, the answers are removed from these records, which then keep only the type of calculation, the tax year, the rule version, the date, the outcome and the counts of what was removed. The fair-use limits that apply to how many free checks and report regenerations an account may use are applied from these records. • Analytics data: retained for up to 24 months, after which it is deleted or anonymised. • Session recordings: not used. If we ever switch session recording on, recordings are deleted automatically after 30 days. Where an exact retention period cannot reasonably be specified (for example, where data is needed for an ongoing legal matter), we review the data at regular intervals and delete or anonymise it once it is no longer necessary for the purpose for which it was collected or required by law. Retention periods are applied when we review the records we hold and when you ask us to delete your data. We do not operate automatic deletion at the end of a retention period, so nothing above is deleted simply because a period has passed: the schedule is applied when we review the records we hold and when you ask us to delete your data. The one deletion that takes effect straight away, without a manual review, is when you ask us to delete your tax check data from your account. You can ask us to delete your tax assessment data at any time — see 'Your privacy rights'. Some records are linked only to your account, and some are held by the platform that provides our hosting, database and authentication services. Where records are held under your account, deleting your account removes your access to them; the retention periods above then determine how long the underlying records are kept for accounting, tax and audit purposes.
Security and access controls
We take reasonable steps to protect the personal information you submit through the website and the Leaving UK Tax Checker. Access to your assessment data is restricted so that only you and authorised administrators can view it. Payment data is handled by Stripe in accordance with its security standards. We do not store your full card details.
Account closure and data requests
You can contact us at any time using the details under 'Contacting us about privacy' to make a data protection request, including a request for a copy of your data, an export, a correction, deletion, or to close your account. What you can do yourself: in the 'Your data rights' section of your account dashboard you can export a machine-readable copy of your data as a JSON file, and request deletion of your tax check data. Deletion removes your assessment answers and your reports. Payment records are anonymised and retained for 6 years as required by law, and your account itself stays open. Both of these take effect immediately. Closing your account: account closure is handled by us rather than by a self-service option. Email us from the address registered to your account and tell us that you want your account closed. We will confirm that the request has come from the account holder, close the account, and delete or anonymise your account information 12 months after closure, unless we need to keep it for longer for a legal reason (see 'Data retention'). Closing an account does not remove our legal retention obligations, for example for payment records. How we handle a request: we verify your identity first, using the contact details we hold for your account. We will confirm what we have done, and tell you about anything we could not delete and why. We respond to a request within one month of verifying your identity, as UK data protection law requires. If a request is complex, the law allows us a further two months, and we will tell you if we need that extra time. If you are not satisfied with how we have handled a request, you can complain to the Information Commissioner's Office (ICO) — see 'Contacting us about privacy'.
Your privacy rights
You have the following rights in relation to your personal information: • Right of access: you can request a copy of the personal data we hold about you. • Right to data portability: you can request a structured, machine-readable export of your personal data. • Right to rectification: you can ask us to correct inaccurate information. • Right to erasure: you can request deletion of your personal data, subject to legal retention obligations. • Right to object: you can object to certain types of processing. • Right to restrict processing: you can ask us to limit how we use your data in certain circumstances. To exercise any of these rights, please contact us using the details below. We will verify your identity before processing your request. The right to erasure is not absolute — we may need to retain certain records (such as payment records) to comply with legal obligations. You can export your data and request deletion of your tax check data yourself at any time from the 'Your data rights' section of your account dashboard; asking us to close your account is handled by us on request.
Automated processing
The Leaving UK Tax Checker produces an automated tax analysis based on the information you provide. Your UK residence position is determined by applying the statutory UK residence tests to the factual answers you give, such as the number of days you spend in the UK. We do not ask you to decide or declare your own residence status. The outcome, the tests that were applied and any information still required are set out in your results. The Full Report (£9.99) and Premium Report (£39.99) are both automated analyses — they are not manual reviews by a tax professional and do not constitute professional tax advice. You have the right to obtain human intervention, to express your point of view, and to contest the outcome of the automated analysis. If you disagree with the assessment, you can contact us using the details below.
Cookies and tracking
We keep you signed in using your browser's local storage: our authentication service stores a sign-in token in your browser so that you do not have to sign in again on every page. You can clear it at any time by signing out or by clearing your browser's stored data. We do not use cookies or similar technologies for advertising, and we do not use third-party advertising, cross-site tracking or profiling tools. The usage records described under 'Information we collect' are stored in our own database rather than in your browser. Our website hosting platform provides traffic measurement on our behalf. It reports aggregate information such as the number of visits and unique visitors, which pages are viewed, the visitor's country, the referring source, and the operating system and device used. It is not an advertising network and it does not receive your assessment answers; we use it only to understand how the service is used and to keep it working. We do not use any advertising analytics service, and no advertising company receives your data from this website. We do not currently show a cookie or consent banner. Whether consent is required for the traffic measurement described above — and, if so, how it should be obtained — is a matter we are reviewing with our advisers, because consent requirements depend on where a visitor is, including in the United Kingdom and the European Union. Where consent is required for any technology we use, we will ask for that consent before the technology is used and we will update this notice.
Session recording
Session recording (session replay) is switched off for this website, and nothing is recorded. Our hosting platform offers the feature as an option, and it can only be switched on deliberately. If it were enabled on this website, a recording would replay a real visitor's session and could include events such as page views, clicks and form submissions, together with the visitor's country, browser, operating system and device. Recordings are deleted automatically after 30 days. Because the Leaving UK Tax Checker asks you for detailed financial and tax information, we do not enable session recording on the pages where you enter or view that information. If we ever enable it anywhere on the website, we will tell you before it is used, we will update this notice, and this policy will explain what is recorded and what is not. In regions such as the United Kingdom and the European Union, replaying a visitor's session requires that visitor's consent, so if recording is ever switched on we will ask for consent before anything is recorded.
Contacting us about privacy
If you have any questions about how we handle your personal information, or if you wish to exercise your privacy rights (including data export or deletion), you can contact us at: AB & CO ACCOUNTING & TAX SERVICES 19-21 Albion Place, Maidstone, ME14 5EG Telephone: 01622 320574 Email: info@ab-and-co.com If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.