Privacy Policy

Cabbooks is bookkeeping and Making Tax Digital for Income Tax software built for self-employed drivers, provided by Cabbooks Ltd. Cabbooks Ltd is the data controller for the information described on this page.

When you create an account and use Cabbooks, we collect your email address, your National Insurance number and trading name (needed to identify your business to HMRC), the income and expense records you add, and an encrypted copy of your HMRC access token once you connect your account.

When you access our website, your browser automatically sends some technical details that HMRC requires us to report with every request, and a CAPTCHA check on sign in and sign up collects your IP address to confirm you are not a bot.

We also keep a log of sign-ins and other account actions, including the date, time and IP address, to help us spot and investigate unauthorised access.

If you join our waitlist before signing up, we collect your name, email address, licensing council and driving platform, so we can let you know when Cabbooks opens.

Your account, business and ledger details, and your HMRC connection, are processed because you have asked us to provide the bookkeeping and tax-filing service they support. This is processing necessary for a contract with you.

The technical details required for HMRC's fraud prevention headers are processed because HMRC requires software connecting to their systems to report them. This is processing necessary to comply with a legal obligation.

The security log is processed because we have a legitimate interest in keeping your account and data secure, and in being able to investigate suspicious activity.

Waitlist details are processed with your consent, given when you submit the form. You can withdraw that consent at any time by emailing us.

We send the records and updates you ask us to send to HMRC, on your behalf. We use trusted third-party providers to host our website, store our database and run the CAPTCHA check on sign in and sign up; they act as processors on our instructions and do not use your data for their own purposes. We do not sell your data or share it for marketing.

Our database is hosted in Ireland, within the European Economic Area, and our website and API run in the United Kingdom. UK data protection law treats the EEA as offering an equivalent standard of protection to the UK, so neither location requires any extra legal safeguard.

We keep your account and ledger data for as long as your account is open, and for as long afterwards as tax law requires you to keep self-employment records. If you disconnect your HMRC connection, we delete the stored token. If you join the waitlist and later decide not to sign up, we keep your details until you ask us to remove them. We keep the security log for 90 days, then delete it automatically. If you delete your account, your security log entries are deleted immediately with everything else — they are not included in the data export described below, since a copy of your own access history is of most use to an attacker, not to you.

We use a cookie to keep you signed in, and a value stored in your browser to remember the device identifier mentioned above. Neither is used for advertising or to track you across other websites.

Under UK GDPR, you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to how we use it. Right now this is a manual process: email hello@cabbooks.online and we will action your request. You can also complain to the Information Commissioner's Office if you are unhappy with how we have handled your data.

If we change what data we collect or why, we will update this page.