Set Aside (setaside.tax) · Last updated: 21 August 2026
This policy explains what personal data Set Aside ("we", "us") collects, why, and your rights over it. Set Aside is a tool that helps UK sole traders track income, expenses and estimate their Self Assessment tax. It is a planning and estimation aid, not a tax-filing service, and is not affiliated with HMRC.
The data controller is Setaside.tax. For any privacy question or to exercise your rights, contact us at administrator@setaside.tax.
Account information: your email address and name, and either a securely hashed password or a Google account identifier if you sign in with Google. If you enable two-factor authentication, we store a secret used to verify your authenticator codes.
The financial information you enter: income, clients, expenses, home-office costs, pensions, subscriptions, mileage, share/RSU details, payments set aside, and any receipt files you upload. This data is yours; we process it only to provide the service to you.
Technical information needed to run the service securely: your IP address, an essential session cookie, and server logs recording the time, method, path, response status and duration of requests (we do not log request contents, passwords, or email/reset links).
We use your data to provide the service, calculate your tax estimates, keep your account secure, and — only if you opt in — send you deadline reminders. Under UK GDPR our lawful bases are: performance of our contract with you (running the app you signed up for); our legitimate interests (keeping the service secure and preventing abuse); and your consent (optional email reminders, which you can turn off at any time in Settings).
We do not sell your data or use it for advertising. We share it only with the service providers needed to operate Set Aside:
Hosting: the application and database run on a server provided by IONOS, located in the UK. Email: transactional emails (verification, password reset, deadline reminders) are sent through Postmark (Wildbit, LLC), which processes the recipient email address and message content; Postmark is based in the United States, and such transfers rely on appropriate safeguards. Sign-in: if you choose Google sign-in, Google processes your authentication.
We use a single, strictly-necessary cookie to keep you signed in. We do not use analytics, tracking, or advertising cookies.
We keep your data for as long as your account exists. If you delete your account (Settings → Delete account), your account and all associated data — income, expenses, receipts and everything else — are permanently removed. Encrypted backups are retained for a limited rotation period and then overwritten.
Data is encrypted in transit (HTTPS). The financial information you enter and any receipt files you upload are also encrypted at rest in our database using AES-256-GCM authenticated encryption, under a separate encryption key for each account. This means that if the underlying database or a backup were ever accessed without authorisation, the stored contents would be unreadable ciphertext rather than your actual figures. Your data is decrypted only to serve it to your own authenticated session. Passwords are stored only as salted scrypt hashes, never in plain text. Two-factor authentication is available, and backups are encrypted at rest. Access to your account's data is restricted to your authenticated session.
Under UK GDPR you have the right to access your data, correct it, delete it, receive a portable copy, restrict or object to processing, and withdraw consent. You can export your data at any time (Settings → Backup / Export) and delete your account yourself. For any other request, contact us at administrator@setaside.tax. If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Set Aside is intended for adults running a business and is not directed at anyone under 18.
We may update this policy; the "last updated" date above will change and, for significant changes, we will notify you.
← Back to Set Aside