1. Who controls your information
The data controller is Paul Holt trading as M.T.D.O. — Making Tax Digital Online, PO Box 11, Carver Street, Manchester, M16 9BZ. Contact contact@makingtaxdigitalonline.com for privacy questions or to exercise a data right.
2. Information collected
- Account identity: name, email address and signed-in account identifier.
- Landlord records: property labels, transaction dates, descriptions, categories, income and expense amounts, quarterly status and portfolio settings.
- Onboarding: name, email, number of properties, preferred plan and contact consent.
- Orders and invoices: name or business name, email, billing address, plan, amount, payment method, order reference, issue and due dates, and payment status.
- Communications and security: messages sent to support and limited technical logs needed to operate, secure and diagnose the service.
M.T.D.O. does not collect card numbers. Bank and cryptocurrency transfers are initiated by you outside the website. Do not enter a National Insurance number, UTR, bank password, private key or wallet seed phrase into any free-text field.
3. Why information is used
- to create and secure your account and provide the service you request;
- to store and display the records you enter;
- to create orders and invoices, match payments and provide support;
- to respond to onboarding requests where you have consented to contact;
- to prevent abuse, investigate faults and protect the service;
- to comply with tax, accounting and other legal obligations.
The principal lawful bases are performance of a contract, steps requested before entering a contract, consent for optional onboarding contact, compliance with legal obligations, and legitimate interests in operating and protecting the service. Consent can be withdrawn at any time without affecting earlier lawful processing.
4. Where information is processed and shared
Information is processed using the website’s hosting, authentication and database infrastructure and by service providers acting under their own contractual and security controls. Information may also be shared with professional advisers, regulators or law-enforcement bodies where reasonably necessary or legally required.
M.T.D.O. does not sell personal information. It does not share landlord records with HMRC because it has no direct HMRC submission connection. If a provider processes information outside the UK, appropriate contractual or legal safeguards will be relied upon.
5. Retention
- unconverted onboarding enquiries are normally deleted or anonymised within 12 months of the last meaningful contact;
- active account and landlord records are kept while the account is open and then normally for up to six years where needed for tax records, disputes or legal obligations;
- orders, invoices and payment records are normally kept for up to six years;
- security and diagnostic logs are kept only for the period reasonably needed to protect and troubleshoot the service.
A longer period may apply where law, a dispute or an active investigation requires it. Data that is no longer needed will be deleted or anonymised.
6. Security
The member workspace uses account-based authentication. Records are separated by the signed-in email identity, and server-side checks restrict access to that account’s records. The service uses managed hosting and database infrastructure, minimises the information requested, and does not collect card or online-banking credentials.
No internet service can promise absolute security. Use a strong, unique account password, protect your email account and report suspected unauthorised access immediately.
7. Cookies and local technology
Essential session or authentication technology may be used so sign-in and the member workspace function correctly. The service does not currently use advertising cookies. If non-essential cookies are introduced, this notice and the consent controls will be updated first.
8. Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, objection or portability of your personal information, and you may withdraw consent. Requests should be sent to contact@makingtaxdigitalonline.com. Identity may need to be verified before information is released.
You may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. Please contact M.T.D.O. first where possible so the concern can be investigated promptly.
9. Changes
Material changes will be dated on this page and, where appropriate, communicated to account holders. The current version always applies from the date shown above.