Privacy Policy
How we handle personal data on ewa.tax and the .EWA founding list. The .EWA app is not available yet; it will come with its own privacy notice, covering the financial data it will process.
Last updated 16 October 20261. Who we are
easywaytoaccounting Ltd ("we", "us", "our") runs ewa.tax and is developing the .EWA app. We are the controller of the personal data described in this policy under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Company: easywaytoaccounting Ltd, registered in England and Wales, company number company number to be added
Registered office: registered office address to be added
Data protection fee registration: registration number to be added
2. At a glance
| What | Why | Lawful basis | How long |
|---|---|---|---|
| Founding list: first and last name, email, business type, date joined | To keep your place, issue your activation code and invite you to the app | Steps you ask us to take before a contract (Art. 6(1)(b)) | Until 12 months after the app launches, or until you leave the list |
| Your choice about progress updates | To send progress updates only if you asked for them, and to prove you did | Consent (Art. 6(1)(a)); keeping the record: legitimate interests (Art. 6(1)(f)) | While we send updates, then 2 years after you stop them |
| Messages you send us | To reply and keep a record of what was agreed | Legitimate interests (Art. 6(1)(f)) | 2 years after the conversation ends |
| Website analytics events | To see which parts of the website are used, so we can improve it | Consent (Art. 6(1)(a)) | 90 days, then only anonymous totals |
| Your cookie choice | To remember what you chose | Legitimate interests (Art. 6(1)(f)) | 6 months on your device |
| Server logs (IP address, browser, time) | To deliver pages and keep the website secure | Legitimate interests (Art. 6(1)(f)) | Short periods set by our hosting and database providers, then deleted |
3. The founding list
When you join the list we collect your first name, last name (optional), email address and the business types you select, and record the date you joined and whether you ticked the box for progress updates. Your name and email are needed to hold your place and send your activation code; without them we cannot add you to the list.
We use these details to:
- keep your place on the list and issue your personal activation code;
- email you about your place: your code, your invitation to the app and anything important about the list or the code;
- send progress updates, only if you asked for them;
- understand which kinds of business are joining, so we can build for them;
- prepare your account if you choose to use the app when it launches.
Every progress update has an unsubscribe link. Stopping updates does not remove you from the list. If you activate your account in the app, your details move into the app under its own privacy notice. If you do not, we delete your list details within 12 months of the app's launch.
4. Website analytics
Only if you allow analytics in the cookie choices, the website records anonymous events: which page you are on, which sections come into view, which buttons, links and questions you click (by their visible label), how far down the page you scroll, and whether you are on a phone, tablet or computer. To count visits without double-counting, it uses a random ID that exists only in that browser tab and disappears when you close it.
It never records what you type into a form (including the calculator), your name or email, your IP address, or your browser's detailed fingerprint, and it is not linked to your place on the founding list. We use the results only to improve the website. Individual events are deleted after 90 days; we keep only totals that cannot identify anyone.
If your browser sends a Global Privacy Control signal, we treat it as a refusal and do not ask. You can change your choice at any time from "Cookie settings" at the bottom of every page. The Cookie Policy lists everything the website may store on your device.
5. Server logs
Like any website, the servers that deliver ewa.tax and receive form submissions and analytics events see technical information such as your IP address, browser type and the time of the request. Our providers use it to deliver the pages and protect against attacks, and keep it for short periods under their own security practices. We do not combine it with anything else or use it to identify you.
6. Who receives your data
We do not sell personal data and do not share it with anyone for their own marketing. We use these providers, who process data only on our instructions under written terms:
| Google (Google LLC and Google Ireland) | Stores founding-list details (Google Sheets and Apps Script) and sends our emails (Gmail). |
|---|---|
| Supabase | Database for anonymous website analytics, hosted in London, United Kingdom. |
| Our website hosting provider | Delivers the website's pages. |
We may also disclose data if the law requires it, to protect our legal rights, or to a buyer or successor if our business is sold, in which case this policy will continue to protect it.
7. International transfers
Google may process data in the United States. Where it does, the transfer relies on the UK Extension to the EU–US Data Privacy Framework (the "UK–US data bridge"), under which Google LLC is certified, or on the UK International Data Transfer Addendum. Supabase stores our analytics data in the United Kingdom; if any of its support or sub-processors handle it outside the UK, the transfer is protected by the same kinds of safeguards. You can ask us for details of these safeguards.
8. How we protect it
Founding-list details are held in an account protected by two-step sign-in, accessed only by the people at easywaytoaccounting Ltd who need them. Data travels encrypted (TLS) and our providers encrypt it at rest. The analytics database accepts new events from the website but cannot be read through the website; only we can read it.
9. Your rights
| Access | Get a copy of the personal data we hold about you. |
|---|---|
| Rectification | Have inaccurate or incomplete data corrected. |
| Erasure | Have your data deleted, for example by leaving the list. |
| Restriction | Ask us to pause using your data while a concern is looked into. |
| Portability | Receive the data you gave us in a common, machine-readable format. |
| Objection | Object to our use of your data based on legitimate interests. |
| Withdraw consent | Stop progress updates or analytics at any time. This does not affect what we did before. |
Email hello@ewa.tax to use any of these rights. It is free. We may ask you to confirm your identity, and we will respond within one month (or tell you within that month if we need longer for a complex request).
We do not make decisions about you by automated means that have legal or similarly significant effects, and we do not build profiles of visitors.
10. Complaints
If you are unhappy with how we have handled your data, please tell us first at hello@ewa.tax. We will acknowledge your complaint within 30 days, look into it without undue delay and tell you the outcome.
You also have the right to complain to the Information Commission (formerly the Information Commissioner's Office, ICO), the UK's data protection regulator.
ico.org.uk/make-a-complaint · 0303 123 1113
11. Children
The website and the founding list are for people aged 18 and over. We do not knowingly collect personal data from anyone younger. If we learn that we have, we delete it.
12. Changes to this policy
We will update this policy when how we handle data changes, and the date at the top shows the latest version. If a change materially affects how we use your founding-list details, we will email you before it takes effect.
See also the Terms and Conditions and the Cookie Policy. Back to top