Privacy Policy
Last updated: 30 April 2026
1. Who we are
This website (cert.tax) is operated by Trojion Consulting Ltd, a company registered in England & Wales (company no. 08663271), registered office 8 High Street, Heathfield, East Sussex, TN21 8LS. We are the data controller for any personal data collected through this website.
You can contact us at [email protected].
2. What data we collect
We collect personal data only when you provide it to us. Specifically:
- Email correspondence: if you email us at [email protected] (or any address on our domain) we receive your name, email address, and the contents of your message.
- Trial sign-ups (when offered): business contact details you provide for the purpose of trialling Cert.
- Server logs: our hosting provider (Cloudflare) processes standard request logs (IP address, user-agent, requested URL) for security and abuse prevention.
We do not currently use cookies or third-party analytics on cert.tax. If we add analytics in the future we will update this policy and, where required, ask for your consent.
3. Why we use it (lawful basis)
- To respond to your enquiry — legitimate interest (Art. 6(1)(f) UK GDPR) or, where applicable, steps taken at your request prior to entering a contract (Art. 6(1)(b)).
- To protect the website from abuse and operate it securely — legitimate interest.
- To comply with legal obligations such as tax and accounting record-keeping — legal obligation (Art. 6(1)(c)).
4. Who we share data with
We do not sell your personal data. We share it only with service providers who process it on our behalf and under contract:
- Cloudflare, Inc. — website hosting (Pages), DNS, and email routing.
- Google LLC / Microsoft Corporation — email inbox providers used by our team to receive and respond to your messages.
Some of these providers may transfer data outside the UK. Where they do, we rely on the UK International Data Transfer Addendum or equivalent safeguards.
5. How long we keep it
Email correspondence: up to 3 years from the last contact, then deleted, unless we are legally required to keep it for longer (e.g. tax records — 6 years).
Server logs: typically 30 days, in line with our hosting provider's defaults.
6. Your rights
Under UK GDPR you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data, subject to our legal obligations;
- object to our processing or ask us to restrict it;
- request your data in a portable format;
- complain to the UK Information Commissioner's Office (ico.org.uk) at any time.
To exercise any of these rights, email [email protected].
7. About the Cert product
Cert (our software product) runs inside your own Microsoft Power Platform / Dataverse environment. Customer financial and tax data processed by Cert stays in the customer's tenant — we (Trojion) do not receive or process it. This privacy policy covers the marketing website (cert.tax) and email correspondence only. A separate Data Processing Addendum is available to customers on request.
8. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top will reflect any change. Material changes will be highlighted on this page.