Data Security Policy

Tax Compass ("we", "us", "our") takes the security of the personal information we hold seriously. This policy explains, in plain terms, the measures we take to keep it safe. It should be read alongside our Privacy Policy.

1. Our approach

We apply appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure, taking into account the nature of the information we hold and the risks involved.

2. Technical measures

• Data submitted through this website is encrypted in transit using HTTPS
• Access to systems holding personal information is restricted to those who need it to do their job
• Accounts are protected with strong, unique passwords, and multi-factor authentication where available
• Software and systems are kept up to date with security patches
• We take regular backups so information can be recovered if something goes wrong

3. Organisational measures

• Only people who need access to personal information, to do their job, are given it
• We work with reputable third-party providers (such as hosting, email/CRM, and analytics platforms) who are themselves required to keep data secure
• We review our security practices from time to time and update them as needed

4. If something goes wrong

If we become aware of a security incident that puts personal information at risk, we'll investigate it promptly, take steps to contain and address it, and — where the law requires it — notify the people affected and the Information Commissioner's Office (ICO) without undue delay.

5. Your part in keeping data safe

You can help by keeping any account details or login information you use with our services private, and by letting us know straight away if you think your information may have been compromised.

6. Changes to this policy

We may update this policy from time to time, for example as our security practices develop. We'll update the date at the top of this page whenever we do.

7. Contact us

If you have a question about this policy, or want to report a security concern, please use the contact form on this website.