Privacy Policy

This Privacy Policy explains how MOJITAX LIMITED ("MojiTax", "we", "us", "our") collects, uses, shares and protects personal data when you use our website at mojitax.co.uk, our learning platform at lms.mojitax.co.uk, and any related services (together, the "Services"). It applies to all visitors, learners, and prospective customers.

MojiTax is a UK-registered company. Our registered office is 11 Bishops Close, Erdington, Birmingham B23 7AY, United Kingdom. We are the data controller for personal data processed through the Services.

1. Personal data we collect

Category	Examples	Source
Account data	Name, email address, password (stored as a secure hash), country	You, when you sign up
Payment data	Transaction amount, currency, payment status	Stripe (we do not store full card numbers)
Course data	Courses enrolled in, progress, assessment results, downloads	You, through use of the Services
Communication data	Messages to our support team, questions to your Consultant, email engagement	You
Technical data	IP address, browser type, device, pages visited, timestamps	Automatically, via your browser
Marketing data	Preferences, consent status, advertising engagement	You, and Google Ads / Google Analytics

2. How we use your data

• To provide the Services — creating your account, delivering course access, marking assessments, issuing certificates, processing payments, sending sign-in links.
• To communicate with you — responding to enquiries, sending operational emails (course updates, receipts, Consultant replies).
• To market our Services — sending newsletters and course announcements (only where you have consented or where we have a legitimate interest).
• To improve the Services — analysing usage patterns, debugging.
• To comply with law — meeting our obligations under tax, accounting, anti-money-laundering and data protection legislation.

3. Legal bases for processing

Under the UK GDPR and the Data Protection Act 2018, we rely on: contract — to deliver the Services you have purchased; consent — for marketing communications and non-essential cookies (withdrawable at any time); legitimate interests — to operate, secure and improve our Services, prevent fraud, and measure advertising effectiveness (balanced against your rights); and legal obligation — to keep financial records and respond to lawful requests from authorities.

4. Who we share your data with

• Payment processors — Stripe Payments Europe Ltd (Ireland) for card and subscription processing.
• Infrastructure providers — our hosting providers and Cloudflare Inc. (secure encrypted backups), bound by data-processing agreements.
• Advertising and analytics — Google LLC (Google Ads, Google Analytics), Microsoft (LinkedIn Ads) and similar measurement platforms, on our marketing pages. We do not sell your personal data.
• Communications providers — SendGrid, Twilio and similar providers, used to deliver emails and messages you have requested or that are required for service delivery.
• Professional advisers and public authorities — accountants, auditors, lawyers where required, and authorities where required by law (e.g. HMRC).

All third-party processors are contractually bound to process personal data only in accordance with our instructions and applicable data-protection law.

5. Cookies

See our Cookie Policy for the cookies used on the learning platform. Analytics and advertising cookies are set only with your consent.

6. International transfers

Some of our processors (e.g. Google, Stripe, Cloudflare) operate globally. Where personal data is transferred outside the United Kingdom or the European Economic Area, we rely on appropriate safeguards including the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or adequacy decisions.

7. How long we keep your data

• Account and course data — for the duration of your account, plus six years after closure (to meet UK tax-record retention rules).
• Payment data — six years, for accounting and audit purposes.
• Marketing data — until you unsubscribe or withdraw consent, plus a short suppression period to honour your preferences.
• Support communications — three years after the last interaction.

8. Your rights

Under the UK GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data ("right to be forgotten"), subject to legal exceptions; object to or restrict certain processing, including direct marketing; request data portability; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us using the details below — we respond within one month, as required by law. You may also lodge a complaint with the UK Information Commissioner's Office at ico.org.uk.

9. Security

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS) and at rest where appropriate, access controls, multi-factor authentication for staff accounts, continuous off-site backups, and regular security review. No system is completely secure; if a personal data breach occurs, we will notify you and the ICO where required by law.

10. Children

The Services are intended for tax professionals and adult learners. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has provided us with personal data, contact us and we will delete it.

11. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be notified by email to active account holders.

12. Contact us

Data Controller: MOJITAX LIMITED
Registered office: 11 Bishops Close, Erdington, Birmingham B23 7AY, United Kingdom
Email for privacy matters: compliance@mojitax.com
General contact: support@mojitax.com