Last Updated: January 11, 2025
Introduction
Welcome to the PAYE Tax Calculator Service ("we", "our", "the Service"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our service.
If you have any questions or concerns about this policy or our data practices, please contact us at support@payeproject.com.
1. Information We Collect
1.1 Information You Provide:
When you use our service, you voluntarily provide us with:
- Email address - To send you your tax calculation report (Required)
- Full name - To personalize your report (Required)
- Tax code - To calculate your tax liability (Required)
- Gross pay (this period & year-to-date) - To calculate your tax liability (Required)
- Tax paid (this period & year-to-date) - To calculate your tax liability (Required)
- Payment period information - To calculate your tax liability (Required)
1.2 Information Automatically Collected:
- IP address - For fraud prevention and security purposes
- Browser information - To ensure compatibility and improve user experience
- Transaction data - Payment verification and reference numbers (via Stripe)
- Session data - Temporary cookies to maintain your form session
1.3 Information We Do NOT Collect:
- National Insurance Number
- Date of birth
- Home address
- Phone number
- Bank account details
- Credit card information (handled securely by Stripe)
2. How We Use Your Information
We use your information to:
- Calculate your PAYE tax liability
- Generate personalized tax reports
- Send reports to your email address
- Verify payments and prevent fraud
- Provide customer support
- Maintain security of our systems
3. Legal Basis for Processing (GDPR)
Under GDPR, our legal basis for processing your personal data is:
- Contract Performance (Article 6(1)(b)) - Processing is necessary to provide the service you requested
- Legitimate Interest (Article 6(1)(f)) - We have a legitimate interest in preventing fraud, providing support, and maintaining security
4. How We Protect Your Information
Encryption:
- At Rest: All sensitive data is encrypted using AES-256-GCM encryption via Google Cloud KMS
- In Transit: All connections use HTTPS with TLS 1.2+ encryption
Access Controls:
- Data stored in Google Cloud Firestore with strict access rules
- Only authorized staff can access customer data (via Identity-Aware Proxy)
- All access is logged for audit purposes
Payment Security:
- We use Stripe for payment processing (PCI DSS Level 1 certified)
- Credit card details NEVER touch our servers
- We only store anonymized payment confirmation IDs
5. Data Retention
90 Days Automatic Deletion
Your calculation data is automatically deleted 90 days after creation. This provides sufficient time for support inquiries while minimizing data retention in line with GDPR's data minimization principle.
6. Who We Share Your Information With
We share your information only with trusted service providers:
- Stripe - Payment processing (PCI DSS Level 1, GDPR compliant)
- SendGrid - Email delivery (GDPR compliant)
- Google Cloud Platform - Hosting and storage (ISO 27001, SOC 2, GDPR compliant)
We do NOT sell your data to third parties, share data for marketing purposes, or use your data for advertising.
7. Your Rights Under GDPR
- Right of Access - Request a copy of your personal data
- Right to Erasure - Request deletion of your personal data
- Right to Rectification - Request correction of incorrect data
- Right to Data Portability - Request your data in a machine-readable format
- Right to Object - Object to processing of your data
- Right to Withdraw Consent - Withdraw your consent at any time
To exercise any of these rights, contact us at support@payeproject.com with your reference number and email address. We will respond within 30 days.
8. Cookies
We use minimal essential cookies:
- Session Cookie - Maintain your form session (deleted when you close browser)
- Promo Code Session - Remember applied promo code during checkout
- Stripe Cookies - Process payments securely
We do NOT use tracking cookies, advertising cookies, or analytics cookies.
9. Children's Privacy
Our service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date and displaying a notice on our website for 30 days.
11. Data Breach Notification
In the unlikely event of a data breach that poses a high risk to your rights and freedoms, we will notify the ICO within 72 hours and notify affected users without undue delay.
12. Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: https://ico.org.uk/
Phone: 0303 123 1113
Email: casework@ico.org.uk
13. Contact Information
Email: support@payeproject.com
Service Name: PAYE Tax Calculator Service
Company: PAYE Project
We aim to respond to all inquiries within 48 hours (and within 30 days for formal GDPR requests).
Effective Date: January 11, 2025 | Version: 1.0