Simply MTD

privacy notice

Last updated: 20 January 2026

Related links

1. Introduction

This Privacy Notice explains how Simply MTD Ltd (“Simply MTD”, “we”, “us”, or “our”) collects, uses, shares, and protects personal data when you:

visit our website;

create or use a Simply MTD account;

use our software to manage bookkeeping or submit information to HMRC; or

We are committed to protecting personal data and complying with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

2. Who We Are (Data Controller)

The data controller is:

SIMPLY MTD LTD
Company number: 14230655
Incorporated in England and Wales

Contact email: info@simplymtd.com

3. Scope of This Privacy Notice

This Privacy Notice applies to:

website visitors;

prospective users who register interest;

individual users, sole traders, landlords, and business users;

accountants and agents using Simply MTD for clients; and

individuals whose data is processed within the Simply MTD platform.

Where you upload or process personal data relating to clients, employees, or other third parties, you are responsible for ensuring you have appropriate authority to do so.

4. Personal Data We Collect

We may collect and process the following categories of personal data.

4.1 Website and usage data

IP address

Device and browser information

Pages visited and interactions

Referring URLs

4.2 Account and contact data

Name

Email address

Account preferences

4.3 Business and financial data

Business details

Transaction records

VAT and income data

Accounting classifications

Client records (where applicable)

4.4 HMRC-related data

Government Gateway identifiers

VAT registration numbers

UTRs and other tax references

Submission metadata

4.5 Communications

Support requests

Email and chat correspondence

Feedback and enquiries

5. How We Use Personal Data

We use personal data to:

provide, operate, and maintain the Simply MTD platform;

enable bookkeeping, reporting, and tax submissions;

submit data to HMRC at your direction;

manage user accounts, subscriptions, and billing;

provide customer support;

monitor, maintain, and improve system performance and usability;

comply with legal and regulatory obligations.

6. Lawful Bases for Processing

Under UK GDPR, we rely on the following lawful bases:

Contract – where processing is necessary to provide the services you have signed up for;

Legal obligation – where processing is required to comply with tax, accounting, or regulatory requirements;

Legitimate interests – to operate, secure, and improve our services, provided those interests are not overridden by your rights;

Consent – for analytics, user experience tools, and non-essential cookies.

You may withdraw consent at any time through cookie settings or browser controls.

7. Sharing of Personal Data

7.1 HMRC

We share personal data with HMRC where you instruct us to do so, using HMRC-provided APIs.

Submissions are made using your or your agent’s HMRC authorisation credentials. We do not determine the content of submissions and are not responsible for HMRC processing outcomes or system availability.

7.2 Service providers

We may share personal data with trusted third-party service providers who act as processors on our behalf, including:

cloud hosting and infrastructure providers;

payment processors (for example Stripe);

analytics and user experience providers (for example Google Analytics and Hotjar);

customer support and communication tools.

All service providers are required to protect personal data and process it only in accordance with our instructions.

7.3 No sale of data or advertising use

We do not sell personal data.

We do not share personal data with advertising networks, data brokers, or advertising companies, and we do not use personal data for targeted or behavioural advertising.

8. Analytics and User Experience Tools

We use analytics and user experience tools to understand how our website and app are used and to improve functionality and usability.

This includes:

• Google Analytics – to analyse usage patterns and performance;

• Hotjar – to analyse user behaviour using heatmaps and session recordings.

These tools:

• collect pseudonymised usage data;

• are configured to mask keystrokes and sensitive fields;

• do not intentionally record full financial or confidential information; and

• operate only where consent has been given.

Further details are provided in our Cookie Notice.

9. International Data Transfers

We aim to store and process personal data within the UK and/or the European Economic Area.

Where personal data is transferred outside these regions, appropriate safeguards are implemented, such as standard contractual clauses or equivalent protections.

10. Data Retention

We retain personal data only for as long as necessary, including:

while an account remains active;

for a reasonable period after account closure; and

where required to meet legal, regulatory, or accounting obligations.

Retention periods vary depending on the type of data and the purpose of processing.

11. Data Security

We implement appropriate technical and organisational measures to protect personal data, including:

encryption in transit and at rest;

access controls and authentication mechanisms;

monitoring and security testing.

While no system can be guaranteed to be completely secure, we take reasonable steps to safeguard personal data.

12. Your Rights

Under UK GDPR, you have the right to:

access your personal data;

request correction of inaccurate or incomplete data;

request erasure of personal data (where applicable);

restrict or object to processing;

request data portability;

withdraw consent where processing is based on consent.

Requests can be made by contacting info@simplymtd.com.

13. Complaints

If you are unhappy with how we handle your personal data, you have the right to complain to the UK Information Commissioner’s Office (ICO).

14. Changes to This Privacy Notice

We may update this Privacy Notice from time to time.
The latest version will always be published on our website.

Privacy notices