Privacy Policy

TaxBloc is a trading name of MortgageBloc Limited ("we", "us", "our"). We are committed to protecting your personal data and being transparent about how we use it. This policy explains what data we collect, why we collect it, and your rights under the UK General Data Protection Regulation (UK GDPR).

1. Who We Are

The data controller for TaxBloc is MortgageBloc Limited, registered in England and Wales under company number 12844126, with a registered address at 1 Dysart Street, London EC2A 2BX.

For questions about this policy or your personal data, contact us at hello@taxbloc.ai.

2. What Data We Collect

Account data

When you create an account, we collect your name, email address, and payment details.

Bank connection data

When you connect a bank account via Open Banking, we access your transaction history to generate your CSV export. We do not store your bank credentials or retain your raw transaction data after export generation.

Usage data

We collect information about how you use TaxBloc, including pages visited, export history, and device/browser information.

Communication data

If you contact us by email or through the contact form, we retain records of that correspondence.

3. How We Use Your Data

• To provide and operate the TaxBloc service
• To process payments and manage your subscription
• To send you service-related communications (e.g. export confirmations)
• To respond to enquiries and support requests
• To comply with our legal and regulatory obligations
• To improve the platform based on usage patterns

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract — processing necessary to provide the service you have signed up for
• Legal obligation — where we are required to process data to comply with the law
• Legitimate interests — for improving our services and preventing fraud, where your rights are not overridden
• Consent — for marketing communications, where you have opted in

5. Data Sharing

We do not sell your personal data. We may share it with:

• Plaid Financial Ltd — our Open Banking provider, to facilitate bank connections
• Payment processors — to handle subscription payments securely
• Service providers — such as email and hosting providers, who process data on our behalf under strict data processing agreements
• Legal authorities — where required by law or to protect our legal rights

6. Data Retention

We retain your account data for as long as your account is active and for up to 6 years after closure, in line with our legal and tax obligations. Transaction data used to generate exports is not retained after the export is delivered.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at hello@taxbloc.ai. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data is transmitted using industry-standard encryption (TLS).

9. Cookies

We use cookies to operate and improve TaxBloc. Please see our Cookie Policy for full details.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or through the site. The current version is always available at taxbloc.ai/privacy-policy.