Skip to main content

Privacy Policy

Last updated: 30 July 2026

1. Who we are

This policy applies to bitcointax.co.uk (the trading name of GMFBB Ltd). GMFBB Ltd is a company registered in England and Wales (company number 16696940), registered office 5 Technology Park, Colindeep Lane, Colindale, London NW9 6BX. GMFBB Ltd is the data controller for the personal data described in this policy and is registered with the Information Commissioner's Office under ICO registration number ZC207283. Questions about this policy or your data: privacy@bitcointax.co.uk.

2. What we collect

  • Enquiry data. When you submit our enquiry form: your name, email address, phone number if you provide it, and the details of your situation that you choose to give us.
  • Technical data. A one-way hashed version of your IP address, used only to prevent duplicate and abusive submissions. We cannot reverse the hash to identify you.
  • Analytics. Aggregate, anonymous usage statistics via Plausible Analytics, which does not use cookies and does not track individuals.
  • Correspondence. Emails you send us and our replies.

Please do not include sensitive information in your enquiry, such as details of your health, or information about criminal offences. Our form does not ask for it and we do not need it to introduce your enquiry.

3. How we use your data and our lawful bases

  • To review and screen your enquiry and respond to you: legitimate interests, and steps taken at your request prior to a potential engagement.
  • To introduce your enquiry to a regulated accountancy firm: your consent, given by the checkbox at the point you submit the form. You can withdraw consent at any time before the introduction is made by contacting us.
  • To keep the site secure and prevent abuse: legitimate interests.
  • To keep records of introductions for our contractual and accounting obligations: legitimate interests and legal obligation.

We do not sell your personal data, and we do not use it for third-party marketing.

4. Who we share it with

  • The regulated accountancy firm we introduce your enquiry to, with your consent. Once introduced, the firm handles your data as an independent data controller under its own privacy policy and professional obligations.
  • Service providers who process data on our behalf: Railway (hosting and database), Cloudflare (network and DNS), and Plausible (analytics). Each acts under contract as our processor or provides infrastructure services.
  • Resend: used to send transactional email. This includes the acknowledgement of your enquiry, our internal notifications, the delivery of your enquiry to a partner firm, and, where applicable, your booking invitation. Your name and email address are passed to Resend for these purposes.
  • Cal.com: used to schedule consultations with partner firms. If you book a meeting through a booking link we send you, your name, email address and chosen appointment time are processed by Cal.com to create and manage the booking.
  • Professional advisers, and authorities or regulators where the law requires it.

If your enquiry is forwarded to a partner firm, we will also send you an invitation to book a consultation with that firm. Bookings are managed through Cal.com, a scheduling service. When you book, your name, email address and chosen time are shared with Cal.com and with the partner firm so the meeting can be arranged. We keep a record of the booking, including any rescheduling or cancellation, as part of managing your enquiry.

5. International transfers

Some of our service providers process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum to safeguard the transfer.

6. How long we keep it

  • Enquiries that are not introduced to a firm: deleted within 6 months of submission.
  • Free-text enquiry detail: deleted once an introduction is made.
  • A minimal record of each introduction (name, contact details, lead reference, consent record): retained for up to 6 years to meet our contractual, audit, and accounting obligations.
  • Correspondence: retained for as long as reasonably needed to deal with the matter, then deleted.

7. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to processing, to data portability, and to withdraw consent where processing relies on it. Contact privacy@bitcointax.co.uk; we will respond within one month. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

8. Security

Data is encrypted in transit, held in access-controlled systems, and limited to the information we actually need. No system is perfectly secure, but we take proportionate technical and organisational measures to protect your data and will notify you and the ICO of any breach where the law requires it.

9. Children

This site is not intended for anyone under 18 and we do not knowingly collect their data. If we discover we hold data about a person under 18 we will delete it promptly.

10. Changes

We will publish the date of the latest revision at the top of this policy. If we make a material change while your enquiry is active, we will tell you by email before it takes effect.