Privacy Policy

Your Tax Data Stays
On Your Device

Calculations run in your browser. The only time your inputs leave your device is when you choose to email your results — and even then we never store them.

Last updated: 13 June 2026
Quick Summary

The 30-Second Version

Everything you need to know at a glance. The full policy follows below.

What We DON'T Do

  • Keep a copy of your tax calculations
  • Sell, share, or monetise your data
  • Track you across other websites
  • Require account creation or login
  • Use third-party advertising networks
  • Employ dark patterns or deceptive practices

What We DO

  • Calculate everything in your browser
  • Only send data when you ask us to email results
  • Use cookieless traffic and performance signals plus consent-based analytics
  • Process the minimum data needed to prevent abuse
  • Tell you exactly which third parties are involved
  • Let you exercise your UK GDPR rights at any time

How We Protect Your Privacy

Four architectural decisions that keep your data yours

Client-Side Calculations

Tax calculations run in your browser. Your salary and tax details are not sent to our servers to get a result — they only leave your device if you choose to email your results.

No Stored Tax Data

We don't keep a copy of your calculations. Nothing about your salary or results is written to a PayeTax database, before or after you calculate.

Consent-Based Analytics

Google Analytics only runs after you accept analytics cookies. Cookieless traffic counts contain no personal data. You can decline and the calculator works identically.

Privacy by Design

Privacy is built into the architecture, not bolted on. Where data must be processed — to email results or to block abuse — we use the minimum needed and say so plainly.

Data Flow

Where Your Tax Data Goes

A plain-language map of what happens to your inputs.

Your Device

Calculations happen here in your browser. Your salary, tax code, and personal details stay on your device unless you choose to email your results.

Our Servers

We send you the calculator app. We only receive your inputs if you request an email of your results — and even then we do not store them.

Trusted Processors

Brevo delivers result emails, Upstash powers abuse protection, and consent-based GA4 plus cookieless analytics and Sentry monitoring help us run the site. No cross-site tracking.

Full Policy

Privacy Policy

The detail behind the summary, written to meet UK GDPR.

Who we are

PayeTax is a free UK tax calculator operated by Jarryd Aubert (“PayeTax”, “we”, “us”). We are the data controller for the limited personal data described in this policy. You can reach us at support@payetax.co.uk.

This policy explains what we process, why, the lawful basis for each, who else is involved, and the rights you have under UK GDPR.

Data we process

Your calculator inputs are processed in your browser to produce a result and are not sent to us for that purpose. We only receive your inputs if you ask us to email your results, and we do not store them. The table below summarises every category.

CategoryDataPurposeLawful basisRetention
Calculator inputsSalary, tax code, pension, student loan, and similar figures you enterProduce your tax breakdown in your browserNot collected by us — processed locally on your deviceNever stored on our servers
Emailed resultsYour email address and the calculated results you ask us to sendDeliver the results email you requestedPerformance of your request (Article 6(1)(b))Not stored by us; held only in our email provider’s sending logs
AnalyticsPage views, device/browser type, and pseudonymous usage eventsUnderstand which tools are useful and improve the siteConsent (Article 6(1)(a)) — GA4 only after you opt inPer Google Analytics retention settings
Aggregate trafficCookieless, aggregated visit counts with no personal identifiersBasic, privacy-preserving traffic measurementLegitimate interests (Article 6(1)(f))Aggregated; not tied to an individual
Error diagnosticsTechnical error context on monitored calculator, tool, blog, and email routesDetect and fix faults that break calculations, public pages, or emailsLegitimate interests (Article 6(1)(f))Limited monitoring window
Abuse preventionA short-lived client identifier derived from your IP addressRate-limit requests and protect the email endpoints from abuseLegitimate interests (Article 6(1)(f))Short-lived (expires automatically)

Third parties we rely on

We use a small set of trusted processors to run the site and deliver features you request. Some may process data outside the UK; where they do, transfers rely on appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses. We do not sell your data or use advertising networks.

ProviderRoleData involved
VercelHosting, content delivery, cookieless traffic analytics, and speed insightsTechnical request data plus aggregate, non-identifying visit and performance signals
BrevoTransactional email delivery for results you ask us to sendYour email address and the results included in that email
Google Analytics 4Consent-based product analyticsPseudonymous usage events, loaded only after you accept analytics cookies
SentryError monitoring on retained calculator, tool, blog, and email routesTechnical error and diagnostic context
UpstashDistributed rate limiting and abuse protectionA short-lived client identifier derived from your IP address

Cookies and analytics

We do not load analytics cookies before you consent. On your first visit you can accept or decline analytics; declining is as easy as accepting. Google Analytics 4 runs only after you opt in, while Vercel's cookieless traffic and performance signals contain no personal identifiers and help us understand basic usage and page speed either way.

You can change your choice at any time using the Cookie Settings link in the footer. The calculator works exactly the same whether or not you accept analytics.

Your rights

Under UK GDPR you have the following rights over your personal data:

  • Access: Ask whether we process data about you and request a copy.
  • Rectification: Ask us to correct data that is inaccurate or incomplete.
  • Erasure: Ask us to delete data we hold about you, where applicable.
  • Restriction: Ask us to limit how we use your data in certain circumstances.
  • Portability: Receive data you provided in a portable format.
  • Objection: Object to processing based on legitimate interests, including analytics.
  • Withdraw consent: Withdraw analytics consent at any time via Cookie Settings.
  • Complain to the ICO: Raise a concern with the UK Information Commissioner’s Office at ico.org.uk.

To exercise any of these, email us at support@payetax.co.uk. We aim to respond within one month.

Contact and complaints

Questions about this policy or how we handle data? Email support@payetax.co.uk.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. We would appreciate the chance to resolve any concern first.

See our compliance and data-sources page