PRIVACY NOTICE
Draft pending legal review. Last updated: 28 October 2026.

Who we are
TidyTill is operated by Katie Arnold, trading as TidyTill, a sole trader in the UK, who is the data controller for the
personal data described below.
Contact for privacy questions: hello@tidytill.co.uk.

What this service does
We turn the CSV exports you download from marketplaces and payment platforms into a spreadsheet that
helps you keep digital records for Making Tax Digital. It is a record-keeping aid only: we do not submit
anything to HMRC and we do not give tax advice.

What we collect and why
- Your email address: to send your preview and download links (contract).
- The files you upload: to produce your workbook (contract). These may contain your customers' names
  and addresses; for that information we act on your behalf as your processor.
- Payment information: handled by Stripe. We receive confirmation that you paid and a reference, never
  your card number (contract; legal obligation to keep business records).
- Your IP address: briefly, to protect the service from abuse (legitimate interests).
- Waitlist (before launch): your email address, the platforms you ticked, the page you signed up on, the
  date, and the consent wording you agreed to: to email you about the launch, beta places and MTD
  deadline reminders (consent). No files are collected.
- Emails you send us: to answer you (legitimate interests).

How long we keep it
- Uploaded files are deleted as soon as your workbook has been built.
- Your workbook, the preview figures and the email address linked to that job are deleted 24 hours
  after upload. You can delete them sooner using the "Delete now" link on your preview page.
- If you buy the annual plan we keep your email address and subscription status for as long as the
  subscription is active, so your later uploads unlock automatically.
- Waitlist sign-ups are kept until you unsubscribe or ask us to delete them, or 24 months after the
  waitlist closes, whichever comes first. The 24-hour deletion above does not apply to the waitlist.
- Stripe keeps payment records as required by law. We keep payment references for as long as HMRC
  requires us to keep business records (at least 5 years after the 31 January filing deadline for the
  tax year).

Where your data is stored and who we share it with
Only the providers we use to run the service:
- Fly.io: hosts the app and its database. Servers are in London, UK.
- Stripe: takes payments.
- Postmark: sends our emails (preview and download links, receipts).
- Cloudflare: hosts this website, runs our DNS and forwards emails sent to our tidytill.co.uk addresses.
- Microsoft (Outlook): the mailbox our tidytill.co.uk emails are forwarded to.
Uploaded files and workbooks are stored only on our servers in London. Some of these providers are
based in, or may process data in, the US or elsewhere outside the UK; where they do, they use legally
recognised safeguards (the UK–US Data Bridge or the UK International Data Transfer Addendum).
We do not sell your data or use it for advertising. We do not use cookies or analytics.

Your rights
You can ask to access, correct or delete your data, object to processing, or ask us to restrict it.
Email hello@tidytill.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).

Changes
We will post any changes here with a new date.