Privacy Policy

1. Who We Are

Taxo.ie ("we", "us", "our") is an Irish website providing free tax calculators and paid personalised tax reports. This privacy policy explains how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988 to 2018.

2. What Data We Collect

Free calculators: We do not collect any personal data from users of our free calculators. All calculations run entirely in your browser using JavaScript. No data is transmitted to our servers.

Paid reports: When you purchase a report and submit a questionnaire, we collect the information you provide, including your name, email address, and the financial details necessary to generate your report (income figures, expenses, property details, and similar). We also receive payment confirmation from Stripe (but not your card details).

Contact forms: If you contact us via our contact form, we collect your name, email address, and message content.

Website analytics: We may use privacy-respecting analytics to understand general usage patterns. We do not use tracking cookies for advertising purposes.

3. How We Use Your Data

We use your personal data for the following purposes:

• To generate and deliver your purchased tax report by email.
• To respond to your contact form enquiries.
• To send tax deadline reminders if you have opted in to our email list.
• To improve our services and fix errors.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

Our legal basis for processing your data depends on the context:

• Contract performance: When you purchase a report, we process your data to fulfil the contract (deliver your report).
• Consent: When you submit a contact form or opt in to email reminders, we process your data based on your consent. You may withdraw consent at any time.
• Legitimate interests: We may process anonymised, aggregated data to improve our services.

5. Data Retention

Questionnaire data and generated reports are retained for 12 months to allow us to handle refund requests, correct errors, and respond to queries. After 12 months, questionnaire data is deleted. Contact form submissions are retained for 24 months. Email list data is retained until you unsubscribe.

6. Third-Party Processors

We use the following third-party services that may process your data:

• Stripe (payments) - processes payment card data. See Stripe's privacy policy.
• Formspree (form submission) - receives questionnaire and contact form data. See Formspree's privacy policy.
• Resend (email delivery) - delivers reports and reminders by email.
• Kit (email marketing) - manages email subscriber lists for deadline reminders.
• Netlify (website hosting) - serves our static website.
• Hetzner (report generation server) - processes questionnaire data to generate reports. Server located in the EU.

All processors are bound by data processing agreements and GDPR-compliant practices. All processing occurs within the EU or EEA, or under adequate safeguards where required.

7. Your Rights

Under GDPR, you have the following rights:

• Access: You can request a copy of the personal data we hold about you.
• Rectification: You can ask us to correct inaccurate data.
• Erasure: You can ask us to delete your data ("right to be forgotten").
• Restriction: You can ask us to restrict processing of your data.
• Portability: You can request your data in a structured, machine-readable format.
• Objection: You can object to processing based on legitimate interests.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us. We will respond within 30 days.

8. Cookies

Taxo.ie uses only essential cookies required for the website to function correctly. We do not use advertising cookies, tracking cookies, or third-party marketing cookies. If we introduce analytics, we will update this policy and seek your consent where required.

9. Children

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), secure server infrastructure, and access controls. However, no method of transmission over the internet is completely secure.

11. Data Protection Authority

If you believe your data protection rights have been breached, you have the right to lodge a complaint with the Data Protection Commission (DPC) in Ireland: dataprotection.ie.

12. Changes to This Policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Contact

For any privacy-related queries, please contact us.