Privacy Policy

TaxBloc is a trading name of MortgageBloc Limited ("we", "us", "our"). This policy explains what personal data we collect, why we collect it, how long we keep it and your rights. It follows UK data protection law: the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations, as amended by the Data (Use and Access) Act 2025.

1. Who we are

MortgageBloc Limited, registered in England and Wales under company number 12844126. Registered office: 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.

We are an agent of Plaid Financial Ltd, an authorised payment institution regulated by the Financial Conduct Authority (Firm Reference Number 804718). Plaid provides the Open Banking connection that TaxBloc uses.

For anything about this policy or your data, email hello@taxbloc.ai.

2. Who this policy covers

• Accountants and practice staff who use TaxBloc (section 3)
• Clients of those practices who connect a bank account (section 4)
• People who try our demo (section 5)
• People who visit our website or contact us (section 6)
• People at accountancy practices we email about TaxBloc (section 7)

3. Accountants and practice staff

What we hold

• Your name, work email address, phone number, and your practice's name and address
• The details you give us so we can check your practice before it can send client links
• The names and email addresses of the clients you ask us to contact
• Billing details. Card payments are handled by Stripe. We do not see or store your full card number.
• A record of links sent, bank connections and CSV downloads, plus login and security logs

Why we use it

• To check your practice and provide the service you have signed up for (contract)
• To bill you and keep financial records (contract and legal obligation)
• To keep TaxBloc secure, prevent fraud and improve the service (legitimate interests)
• To send service emails, such as confirmations and important changes (contract)

We check practices by hand. We do not make decisions about you by automated means alone.

4. Clients who connect a bank account

How it works

Your accountant asks us to email you a link. You connect your bank account through Plaid. We turn your transactions into a CSV file for your accountant, ready for Making Tax Digital.

What we hold

• Your name and email address, given to us by your accountant
• Details of the accounts you choose to connect, and their transactions (such as date, description and amount)

Plaid handles your bank login. We never see or store your bank username, password or security codes.

Who decides how it is used

Your accountant decides why your data is collected and what it is used for. For this data we act on your accountant's behalf and follow their instructions. Your accountant's own privacy notice also applies.

Plaid provides the connection under its FCA authorisation. Its End User Privacy Policy explains how Plaid handles your data.

What we do not do

We only use your data to create the file for your accountant. We do not sell it, use it for marketing or use it to train AI models.

Ending access

You can end the connection at any time by telling your accountant or emailing us. Your bank may also let you remove it from its list of connected apps. Once the connection ends, we cannot collect any more transactions.

How long we keep it

We do not keep your transaction data after we have delivered the CSV to your accountant. We keep a record of the link we sent and your connection for as long as your accountant's account is open and for up to 6 years after it closes.

5. Trying the demo

If you try our demo, we collect your name and email address so we can send you the demo link and a sample file. The demo uses a test bank and fictional data. No real bank account is connected and no real transactions are collected.

We may email you to follow up about TaxBloc. Reply "no thanks" to stop. We rely on our legitimate interests in responding to your request, and we delete demo details 12 months after our last contact with you.

6. Website visitors and enquiries

Forms

When you sign up or contact us, we collect what you enter, such as your name, email address, phone number, practice and message. Forms are delivered to our inbox through Formspree. If you arrived from one of our emails, the form also records the reference number and campaign tags from the link, so we know which email it came from.

Cookies

We only use Google Analytics if you accept analytics cookies. See our Cookie Policy.

How long we keep it

We keep enquiries for 2 years after our last contact with you, unless you become a customer, in which case section 3 applies.

7. If we email your practice about TaxBloc

We email UK accountancy practices that are limited companies or limited liability partnerships to tell them about TaxBloc. This section applies to you if you have received one of those emails and are not a TaxBloc customer. We do not email sole traders or partnerships without their consent.

What we hold

The name, business email address and firm of the person we write to, which of our emails we have sent them and when, whether the link in an email was visited, and a short note of any reply.

Where we got your details

From LinkedIn Sales Navigator, a professional networking service, using business details that you and your practice have made available there, and from the public register at Companies House. We do not buy contact lists.

How many emails

No more than four emails over about four weeks. Each one says how to stop them.

Link visits

The link in these emails carries a reference number. When the link is visited, our website records the reference number, the page and the time, so we know the email was of interest and do not write again unnecessarily. This uses no cookies. We do not record your IP address or anything about your device, and nothing is stored on your device. We do not use tracking images, so we do not know whether an email has been opened.

The link may also carry your name, email address and firm so that our sign-up form is filled in for you. This stays in your browser and is only sent to us if you submit the form.

If you accept analytics cookies on our website, Google Analytics also records the reference number with your visit.

Why we are allowed to do this

We rely on our legitimate interests in telling businesses that are likely to find TaxBloc useful about it.

Stopping the emails

Reply "no thanks" to any of our emails, or use the unsubscribe option in your email program. We act on this straight away and permanently, and we will not contact anyone else at your practice unless they ask us to.

How long we keep it

We delete these details 12 months after our last contact with you. If you have asked us not to email you, we keep your email address and the date on a do-not-contact list, and nothing else, so that we never do. If you ask us to erase your details entirely, we keep only a coded marker that cannot be read back as your address, for the same reason.

8. Who we share data with

We do not sell personal data. We share it only with:

• Plaid Financial Ltd, to provide bank connections
• Your accountant, if you are their client and connect a bank account
• Amazon Web Services, which hosts TaxBloc and sends our service emails
• Microsoft, which provides our business email
• Stripe, which processes payments
• Formspree, which delivers website form submissions
• Google, for website analytics, only if you accept analytics cookies
• Our professional advisers, and courts, regulators or law enforcement where the law requires it

Our service providers may only use your data to provide their service to us.

9. Transfers outside the UK

Some of these providers, or their group companies, process data in the United States or elsewhere outside the UK. Where they do, the transfer is protected by UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or by the UK International Data Transfer Agreement or Addendum.

10. How long we keep data

• Customer account and billing data: while the account is open and for up to 6 years after it closes
• Client transaction data: until the CSV is delivered to the accountant (section 4)
• Demo details: 12 months after last contact
• Enquiries: 2 years after last contact
• Outreach details: 12 months after last contact, then a do-not-contact entry only if you asked us to stop (section 7)
• Google Analytics data: no more than 14 months

11. Your rights

You have the right to:

• Get a copy of the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted
• Object to, or ask us to restrict, how we use your data
• Receive your data in a machine-readable format
• Withdraw consent at any time, where we rely on it

Email hello@taxbloc.ai. We will reply within one month. If you are a client of an accountant who uses TaxBloc, you can also ask your accountant, and we will help them respond.

12. Complaints

If you are unhappy with how we have handled your data, please complain to us first at hello@taxbloc.ai. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome without undue delay.

You can also complain to the Information Commissioner's Office at ico.org.uk.

13. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS) and restricted access. Only practices we have checked can send client links.

14. Changes to this policy

We will update this policy when how we use data changes. We will tell customers about material changes by email. The current version is always at taxbloc.ai/privacy-policy.