Are the calculators HMRC compliant?

Our calculations are built to align with HMRC guidance and use the latest April 2026 rates. However, they're for guidance only – always verify complex cases with HMRC or a qualified professional.

Yes. We're ICO registered (ZC013807) and calculations run in your browser – we don't store sensitive payroll data unless you explicitly save it to your account.

Do you integrate with payroll software?

MBridge tools work as standalone calculators alongside your existing software like Sage, Xero, and QuickBooks. No integration required – use our tools as a pre-check layer.

What's the VAT registration threshold?

The UK VAT registration threshold is £95,000 taxable turnover in a rolling 12-month period. You must register within 30 days of exceeding this threshold.

Privacy Policy — MBridge Technologies | MBridge Compliance Co-Pilot

1. Introduction

MBridge Technologies Limited ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services at mbridgetechnologies.cloud.

Company Details:
MBridge Technologies Limited
UK Company Registration: 16708904
ICO Registration: ZC013807

2. Information We Collect

2.1 Information You Provide

Account information (email address, name) when you register
Payment information processed securely through Paddle
Data you enter into our calculators (not stored unless you save it)
Communications when you contact us

2.2 Automatically Collected Information

Browser type and version
Device information
IP address
Pages visited and time spent

3. How We Use Your Information

To provide and maintain our services
To process your transactions
To send you service-related communications
To improve our website and services
To comply with legal obligations

4. Data Storage and Security

Your data is stored securely using Supabase, which employs industry-standard encryption and security measures. Calculator inputs are processed in your browser and are not stored on our servers unless you explicitly choose to save calculations to your account.

Payment processing is handled by Paddle. We do not store your credit card details.

5. Your Rights (GDPR)

Under UK GDPR, you have the right to:

Access - Request a copy of your personal data
Rectification - Request correction of inaccurate data
Erasure - Request deletion of your data ("right to be forgotten")
Portability - Request your data in a machine-readable format
Object - Object to processing of your data
Restriction - Request restricted processing

To exercise these rights, contact us at privacy@mbridgetechnologies.cloud

6. Cookies

We use essential cookies to maintain your session and preferences. We do not use third-party tracking cookies or advertising cookies.

7. Third-Party Services

We use the following third-party services:

Supabase - Database and authentication (London, eu-west-2)
Paddle - Payment processing (PCI DSS compliant)
Sentry - Error monitoring (PII scrubbing enabled)
Resend - Transactional email (EU/Ireland region)

Each service has their own privacy policy governing their use of your data.

8. HMRC API Data Processing

Where you choose to connect your HMRC account to MBridge Factory, we process additional data on your behalf:

8.1 What We Access

VAT obligations and return data (via Making Tax Digital for VAT API)
VAT liabilities and payment history
Self Assessment data (where applicable)

8.2 How We Access It

We use HMRC's OAuth 2.0 authorisation flow. You sign in directly with HMRC using your Government Gateway credentials. We never see or store your Government Gateway password. We store only the encrypted access and refresh tokens needed to make API calls on your behalf.

8.3 Fraud Prevention Data

HMRC requires us to submit fraud prevention headers with every API request. This includes your browser type, device information, timezone, screen size, and a device identifier. This data is sent directly to HMRC and is required by law for Making Tax Digital compliance. We do not use this data for any other purpose.

8.4 Lawful Basis

We process HMRC data under Article 6(1)(a) of UK GDPR (your explicit consent when you connect your HMRC account) and Article 6(1)(b) (performance of our contract with you to provide tax filing services).

8.5 Disconnecting

You can disconnect your HMRC account at any time from your dashboard settings. This revokes our access tokens and we will no longer be able to access your HMRC data. Previously submitted returns and obligation records are retained for your records unless you request their deletion.

9. Data Retention

We retain your account data for as long as your account is active. Saved calculations are retained until you delete them or close your account. You can delete your account at any time from your dashboard settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@mbridgetechnologies.cloud
MBridge Technologies Limited
United Kingdom

Privacy Policy