Privacy policy
Last updated: July 2026
Who we are
cistaxrefund.co.uk is operated by Blythe Phillips ("we", "us"), an accountancy practice and the data controller for any personal data collected through this website. Contact: enquiries@cistaxrefund.co.uk.
The short version
- This website sets no cookies and uses no analytics, tracking or advertising technology.
- The refund calculator runs entirely in your browser. Figures you enter are never transmitted to us or anyone else, and are not stored.
- We only receive personal data if you choose to send it — through the enquiry form, by email or by phone.
- We never sell your data or use it for marketing without your explicit consent.
What we collect and why
| Data | When | Purpose | Lawful basis (UK GDPR) |
|---|---|---|---|
| Name, email, phone (optional), trade, your message | You submit the enquiry form or email us | Responding to your enquiry and providing our services | Art. 6(1)(b) — steps prior to a contract; Art. 6(1)(f) — legitimate interest in answering you |
| Tax and financial records you later provide as a client | You engage us | Preparing and filing your tax return | Art. 6(1)(b) — contract; Art. 6(1)(c) — legal obligations (tax, anti-money-laundering) |
| Basic technical logs (IP address, pages requested) | Automatically by our hosting provider | Security and abuse prevention | Art. 6(1)(f) — legitimate interest in running a secure service |
The calculator
The refund calculator is JavaScript that runs on your own device. The income, expense and deduction-rate figures you enter are processed in your browser's memory only. They are not sent to our servers, not stored in cookies or local storage, and are discarded when you leave the page.
Who we share data with
Nobody, except: our website hosting provider (which processes technical logs to serve the site); Formspree Inc., which delivers enquiry-form submissions to us by email and acts as our processor for that purpose only; HMRC, when you engage us to file on your behalf; and where we are legally required to disclose (e.g. anti-money-laundering law). Where these providers process data outside the UK (Formspree is US-based), transfers are covered by appropriate safeguards under UK GDPR, including standard contractual clauses.
How long we keep it
- Enquiries that don't become clients: deleted within 12 months.
- Client records: retained as required by law — generally 6 years after the end of the engagement, per tax and anti-money-laundering rules.
Your rights
Under UK GDPR you have the right to access, correct, erase, restrict or object to our processing of your personal data, and to data portability. To exercise any right, email enquiries@cistaxrefund.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Changes
Any changes to this policy will be posted on this page with an updated date.