Taxpipe

Privacy Policy

Last updated: February 2026

1. Introduction

Taxpipe ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our CT600 filing service at taxpipe.co.uk, in compliance with the UK GDPR and the Data Protection Act 2018.

2. Data Controller

Taxpipe is the data controller for the personal data processed through this service. You can contact us at info@taxpipe.co.uk.

3. Data We Collect

We collect the following categories of personal data:

  • Account information: email address and password
  • Company details: company name, registration number, UTR, registered address
  • Financial data: CT600 box values, accounting periods, profit and loss figures
  • Government Gateway credentials: user ID and password, stored in encrypted form for HMRC submission
  • Payment information: processed securely via Stripe; we do not store full card details

4. How We Use Your Data

We use your personal data to:

  • Provide the CT600 filing service, including tax computation and HMRC submission
  • Process payments for the service
  • Communicate with you about your filings and account
  • Comply with legal obligations

5. Data Storage and Security

Your data is stored in the EU region on infrastructure provided by Fly.io. Government Gateway credentials are encrypted at rest. We implement appropriate technical and organisational measures to protect your data.

6. Third-Party Services

We share your data with the following third parties, only as necessary to provide the Service:

  • Stripe — payment processing
  • HMRC — CT600 tax return submission
  • Companies House — company information lookup
  • Fly.io — application hosting and data storage

7. Data Retention

We retain tax return data for a minimum of 6 years after the end of the relevant accounting period, in accordance with HMRC record-keeping requirements. Account data is retained for as long as your account is active. You may request deletion of your account and associated data, subject to our legal retention obligations.

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of access — request a copy of the data we hold about you
  • Right to rectification — request correction of inaccurate data
  • Right to erasure — request deletion of your data, subject to legal retention requirements
  • Right to data portability — receive your data in a structured, machine-readable format
  • Right to object — object to processing of your data in certain circumstances

To exercise any of these rights, contact us at info@taxpipe.co.uk.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Service.

10. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at info@taxpipe.co.uk.