Privacy Policy

ScorpTax is provided by Scorpia Tech Ltd (“we”, “us”). It helps you keep digital records and send your Income Tax updates and tax return to HMRC under Making Tax Digital. This policy explains what personal data ScorpTax handles, why, and what we do with it.

What we collect

• Account details: your email address, your password (stored only as a secure hash by our sign-in provider) and your two-step verification setup.
• Your tax identity: your name and National Insurance number. We encrypt your National Insurance number before storing it and only show it masked.
• Your HMRC connection: the access tokens HMRC gives us when you connect, stored encrypted. We never see or store your Government Gateway password.
• Your income and expense records, the answers you give about your tax affairs, and the updates, calculations and returns exchanged with HMRC.
• If you connect ScorpInvoice or ScorpBook: the figures those products send us for your businesses.
• Technical information HMRC requires with every submission (fraud prevention data such as your IP address, browser and screen details, and a device identifier), plus sign-in times and error logs needed to run and secure the service.

Why we use it

• To provide ScorpTax: keeping your records, working out your figures and sending them to HMRC when you ask us to.
• To meet legal requirements, including HMRC's fraud prevention rules for tax software and keeping a record of what was submitted.
• To keep the service secure, prevent misuse and fix problems, and to answer you when you contact us.

We rely on providing the service you asked for (contract), our legal obligations, and our legitimate interest in running it securely.

Who we share it with

• HMRC: the information you choose to submit, with the fraud prevention data the law requires.
• Supabase: hosts our database and handles sign-in.
• Cloudflare: runs the website and protects it from attacks.

We do not sell your data or use it for advertising.

How long we keep it

HMRC can ask about a tax return for several years after it is filed, so we keep your records and submission history while your account is open and for at least six years after the end of the tax year they relate to, unless you ask us to delete them earlier and the law allows it. You can export your records at any time.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Contact scorptax@scorpiatech.com. You can also complain to the Information Commissioner's Office (ico.org.uk).