Skip to content

Privacy policy

Last updated: 9 September 2026

Controller and contact

iTechLounge Ltd (trading as TaxNuvia), company number 16361860, is the controller for the TaxNuvia marketplace. Registered office: 20 Wenlock Road, London, England, N1 7GU. Privacy requests can be sent to privacy@taxnuvia.co.uk.

Information we collect

  • Account details, sign-in identifiers and profile preferences.
  • Client brief information: contact details, business type, service requirements, turnover and staff bands, town, postcode, delivery preference, timing and notes.
  • Accountant application and profile details, service coverage, professional-body claims and evidence supplied for review.
  • Messages, lead status, reviews, moderation records and support correspondence.
  • Accountant matching-alert preferences and a delivery record containing the brief identifier, fit score, matched services, channels and time sent.
  • Match-run records containing candidate identifiers, ranking source, fit scores and concise reasons or watchouts used to explain a recommendation.
  • Consultation requests, preferred availability, confirmed appointment times and private operational notes recorded by the selected firm.
  • Security and diagnostic information, including a one-way connection fingerprint used to limit abusive submissions.
  • Optional analytics or marketing data only where the relevant cookie consent is active.

What is public

Marketplace briefs may show service requirements, business type, turnover band, staff band, town, outward postcode area, timing and remote/in-person preference. They never show the client's name, email, phone, full postcode, business name or free-text notes. Consultation requests and appointment details are never public. Public accountant profiles show only fields approved for publication.

How brief sharing works

A client can post a marketplace brief or send a direct request to a selected firm. For marketplace briefs, approved accountant firms with an active subscription may choose to unlock the brief; only then do they receive the client's contact details and full notes. Direct requests and consultation requests go only to the selected eligible firm. TaxNuvia records the consent wording and time used for each submission. Firm-only consultation notes are not returned to the requesting client through the dashboard. Marketplace alerts sent to suitable subscribed firms use only broad service, location and fit information; they do not include client identity, contact details, full postcode or free-text notes.

AI-assisted recommendations

TaxNuvia first applies fixed eligibility and subscription rules, then calculates a deterministic fit score. Where our AI matching service is enabled, it may re-rank only those eligible firms using structured brief and firm-profile fields. Client name, business name, email, phone, full postcode and raw private notes are excluded; limited requirements text is automatically redacted. AI output is guidance rather than a decision or professional endorsement: clients choose whom to contact and firms choose whether to respond. If the AI service is unavailable, the rules-based ranking remains available.

Purposes and lawful bases

We process data to provide accounts, matching, messaging, security, billing, moderation and support under the performance of our contract and our legitimate interests in operating a safe marketplace. We process billing and company records where legally required. Optional marketing and non-essential cookies rely on consent, which can be withdrawn.

Recipients and processors

Data may be shared with the eligible accountant firms described above and with contracted infrastructure, authentication, database, hosting, AI matching, email, monitoring and payment providers acting under appropriate terms. Stripe processes accountant subscription payments. We do not sell client contact data or permit firms to resell, publish or use leads outside responding to the stated requirement.

International transfers

Some processors may handle data outside the UK. Where this occurs, we use an applicable UK adequacy decision, UK International Data Transfer Agreement/addendum or another lawful safeguard, together with security and access controls.

Retention

Open and closed briefs, messages and related marketplace records are normally retained for up to 24 months, then deleted or anonymised unless a dispute, fraud investigation or legal requirement needs longer retention. Security fingerprints are used only for abuse prevention. Alert preferences remain while the accountant account is active; delivery records follow the related brief's retention. Account and billing records are retained while the account is active and afterwards only for the period reasonably required for legal, tax, dispute and security purposes. Retention rules will be reviewed before public launch.

Your rights

UK data protection law may give you rights to access, correct, erase, restrict, port or object to processing and to withdraw consent. Identity verification may be required before fulfilling a request. You can also complain to the Information Commissioner's Office.

Security and children

TaxNuvia uses access controls, row-level database security, subscription gates, rate limits and moderation. No internet service is completely risk-free, so clients should not put passwords, bank details, identity documents or unnecessary sensitive information in a brief. TaxNuvia is intended for users aged 18 or over.

Cookies

Essential storage supports sign-in, security and preferences. Analytics and marketing categories remain optional. .