cert.tax

Privacy Policy

Last updated: 20 July 2026

1. Who we are

This website (cert.tax) is operated by Trojion Consulting Ltd, a company registered in England & Wales (company no. 08663271), registered office 8 High Street, Heathfield, East Sussex, TN21 8LS. We are the data controller for any personal data collected through this website.

You can contact us at [email protected].

2. What data we collect

We collect personal data only when you provide it to us. Specifically:

  • Contact and trial forms: if you submit a form on this site we receive your name, email address, company, and the details you provide. Form submissions are delivered to us by Web3Forms (see section 4).
  • Email correspondence: if you email us at [email protected] (or any address on our domain) we receive your name, email address, and the contents of your message.
  • Server logs: our hosting provider (Cloudflare) processes standard request logs (IP address, user-agent, requested URL) for security and abuse prevention.
  • Analytics: we may use Cloudflare Web Analytics, a cookieless, privacy-focused measurement tool that does not track you across sites and does not use any client-side state. We do not use advertising or cross-site tracking cookies.

3. Why we use it (lawful basis)

  • To respond to your enquiry — legitimate interest (Art. 6(1)(f) UK GDPR and, where you are in the EU/EEA, EU GDPR) or, where applicable, steps taken at your request prior to entering a contract (Art. 6(1)(b)).
  • To protect the website from abuse and operate it securely — legitimate interest.
  • To comply with legal obligations such as tax and accounting record-keeping — legal obligation (Art. 6(1)(c)).

4. Who we share data with

We do not sell your personal data. We share it only with service providers who process it on our behalf and under contract:

  • Cloudflare, Inc. — website hosting (Pages), DNS, email routing, and (where enabled) cookieless web analytics.
  • Web3Forms — form submission delivery: when you submit a form on this site, its contents are relayed to our inbox by the Web3Forms service.
  • Google LLC / Microsoft Corporation — email inbox providers used by our team to receive and respond to your messages.

Some of these providers may transfer data outside the UK. Where they do, we rely on the UK International Data Transfer Addendum or equivalent safeguards.

5. How long we keep it

Email correspondence: up to 3 years from the last contact, then deleted, unless we are legally required to keep it for longer (e.g. tax records — 6 years).

Server logs: typically 30 days, in line with our hosting provider's defaults.

6. Your rights

Under UK GDPR — and, if you are in the EU/EEA, the EU GDPR — you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate data;
  • ask us to delete your data, subject to our legal obligations;
  • object to our processing or ask us to restrict it;
  • request your data in a portable format;
  • complain to the UK Information Commissioner's Office (ico.org.uk) — or, if you are in the EU/EEA, to your local supervisory authority — at any time.

To exercise any of these rights, email [email protected].

7. About the Cert product

Cert (our software product) runs inside your own Microsoft Power Platform / Dataverse environment. Customer financial and tax data processed by Cert stays at rest in the customer's tenant. With Cert IQ disabled or not licensed, we (Trojion) do not receive or process customer data at all. With Cert IQ enabled, request-scoped context (for example, the account descriptions being mapped) transits our Azure gateway to Anthropic's Claude model for the duration of the request only — it is not stored by us and not used for model training. This privacy policy covers the marketing website (cert.tax) and email correspondence only. A separate Data Processing Addendum covering the product, including Cert IQ, is available to customers on request.

This marketing website itself uses no AI. Cert IQ — the optional AI capability inside the Cert product — is governed by the customer agreement and Data Processing Addendum, not by this website policy. Cert is fully functional with Cert IQ disabled.

8. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top will reflect any change. Material changes will be highlighted on this page.

← Back to home