Privacy Policy
Last updated: 17 August 2026
1. Who we are
This policy applies to bitcointax.co.uk (the trading name of GMFBB Ltd). GMFBB Ltd is a company registered in England and Wales (company number 16696940), registered office 5 Technology Park, Colindeep Lane, Colindale, London NW9 6BX. GMFBB Ltd is the data controller for the personal data described in this policy and is registered with the Information Commissioner's Office under ICO registration number ZC207283. Questions about this policy or your data: privacy@bitcointax.co.uk.
2. What we collect
- Enquiry data. When you submit our enquiry form: your name, email address, phone number if you provide it, and the details of your situation that you choose to give us.
- Technical data. A one-way hashed version of your IP address, used only to prevent duplicate and abusive submissions. We cannot reverse the hash to identify you.
- Analytics. Aggregate usage statistics, and, where you consent, information collected by analytics and advertising cookies. Section 5 explains this in full.
- Correspondence. Emails you send us and our replies.
Please do not include sensitive information in your enquiry, such as details of your health, or information about criminal offences. Our form does not ask for it and we do not need it to introduce your enquiry.
3. How we use your data and our lawful bases
- To review and screen your enquiry and respond to you: legitimate interests, and steps taken at your request prior to a potential engagement.
- To introduce your enquiry to a regulated accountancy firm: your consent, given by the checkbox at the point you submit the form. You can withdraw consent at any time before the introduction is made by contacting us.
- To keep the site secure and prevent abuse: legitimate interests.
- To keep records of introductions for our contractual and accounting obligations: legitimate interests and legal obligation.
We do not sell your personal data, and we do not use it for third-party marketing.
4. Who we share it with
- The regulated accountancy firm we introduce your enquiry to, with your consent. Once introduced, the firm handles your data as an independent data controller under its own privacy policy and professional obligations.
- Service providers who process data on our behalf: Railway (hosting and database), Cloudflare (network, DNS and web analytics), and Plausible (analytics). Each acts under contract as our processor or provides infrastructure services.
- Google: used for analytics and advertising measurement, where you consent. Section 5 explains what Google collects and on what basis.
- Resend: used to send transactional email. This includes the acknowledgement of your enquiry, our internal notifications, the delivery of your enquiry to a partner firm, and, where applicable, your booking invitation. Your name and email address are passed to Resend for these purposes.
- Cal.com: used to schedule consultations with partner firms. If you book a meeting through a booking link we send you, your name, email address and chosen appointment time are processed by Cal.com to create and manage the booking.
- Professional advisers, and authorities or regulators where the law requires it.
If your enquiry is forwarded to a partner firm, we will also send you an invitation to book a consultation with that firm. Bookings are managed through Cal.com, a scheduling service. When you book, your name, email address and chosen time are shared with Cal.com and with the partner firm so the meeting can be arranged. We keep a record of the booking, including any rescheduling or cancellation, as part of managing your enquiry.
5. Analytics and advertising
We use Google Analytics 4, a service provided by Google, to understand how visitors use bitcointax.co.uk. Where you consent, Google Analytics sets cookies and collects information including the pages you view, how you reached the site, your approximate location derived from your IP address, and the type of device and browser you use. We use this to improve our guides and the enquiry process.
We use Google Ads to advertise the site on search engines. Where you consent, Google Ads sets a cookie that allows us to measure whether an advertisement led to an enquiry. We use this only to judge whether our advertising is working. We do not use it to profile you or to serve you advertisements elsewhere.
We use Plausible Analytics and Cloudflare Web Analytics to count visits. Neither sets cookies, uses fingerprinting, nor identifies individual visitors.
Google processes this data as an independent controller under its own privacy policy, available at policies.google.com/privacy. Data may be transferred outside the United Kingdom. Where it is, Google states that transfers are made under approved safeguards, including the UK Addendum to the EU Standard Contractual Clauses.
Our lawful basis for analytics and advertising cookies is your consent. You may withdraw consent at any time using the “Cookie preferences” link in the footer, and withdrawal does not affect anything done before you withdrew.
6. Cookies
We use strictly necessary cookies, and, where you consent, analytics and advertising cookies. Every cookie we set is listed, with what it does and when it expires, in our Cookie Notice.
7. Enquiry attribution
When you submit an enquiry, we record how you reached the site alongside your enquiry. This includes the page you were on, the page you first arrived on, the website that referred you, and, where you arrived from one of our advertisements, the click identifier Google adds to the advertisement link.
We record this for two reasons. First, to understand which of our guides and advertisements produce genuine enquiries, so we know where to invest. Second, because we are paid by the accountancy firms we introduce you to, and we must be able to evidence that an introduction came from us.
Our lawful basis is legitimate interest: operating and measuring an introduction service. This information is recorded whether or not you accepted cookies, because it is taken from the enquiry you chose to send us rather than from tracking you across the internet. It is retained with your enquiry record and for the same period.
8. International transfers
Some of our service providers process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum to safeguard the transfer.
The transfers described in this section concern our processors. Google Analytics and Google Ads are different: Google acts as an independent controller for the data described under “Analytics and advertising” above, and makes its own transfers under its own privacy policy and safeguards. See that section for detail.
9. How long we keep it
- Enquiries that are not introduced to a firm: deleted within 6 months of submission.
- Free-text enquiry detail: deleted once an introduction is made.
- A minimal record of each introduction (name, contact details, lead reference, consent record): retained for up to 6 years to meet our contractual, audit, and accounting obligations.
- Correspondence: retained for as long as reasonably needed to deal with the matter, then deleted.
10. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to processing, to data portability, and to withdraw consent where processing relies on it. Contact privacy@bitcointax.co.uk; we will respond within one month. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.
11. Security
Data is encrypted in transit, held in access-controlled systems, and limited to the information we actually need. No system is perfectly secure, but we take proportionate technical and organisational measures to protect your data and will notify you and the ICO of any breach where the law requires it.
12. Children
This site is not intended for anyone under 18 and we do not knowingly collect their data. If we discover we hold data about a person under 18 we will delete it promptly.
13. Changes
We will publish the date of the latest revision at the top of this policy. If we make a material change while your enquiry is active, we will tell you by email before it takes effect.