Privacy Policy

Welcome to Fylix, operated by Skyie Global Accountants and Business Advisors Ltd ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy rights in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy describes how we collect, use, store, and share information when you use our self-assessment tax filing platform and related services. By using Fylix, you acknowledge that you have read and understood this policy.

If you have any questions about how we handle your data, please contact us at [email protected].

We collect several types of information to provide and improve our services:

2.1 Account Information

• Personal details: name, email address, phone number, postal address
• Business information: company name, UTR number, industry type, role
• Authentication credentials: hashed passwords, security questions

2.2 Financial & Tax Data

• Income and expense records
• Bank transaction data (when you connect bank accounts)
• Tax return submissions and HMRC correspondence
• Property details (for landlords)
• Receipt images and supporting documents

2.3 Usage Data

• Log data: IP address, browser type, device information
• Platform interactions: pages visited, features used, time spent
• Performance metrics: error logs, response times

2.4 Cookies & Tracking

We use cookies and similar technologies to enhance your experience. See our Cookie Policy for detailed information.

We process your data for the following purposes:

• legal.privacy.sections.use.items.service
• legal.privacy.sections.use.items.account
• legal.privacy.sections.use.items.support
• legal.privacy.sections.use.items.improvement
• legal.privacy.sections.use.items.security
• legal.privacy.sections.use.items.legal
• legal.privacy.sections.use.items.comms

legal.privacy.sections.use.lawful

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal obligations.

Retention Periods

• legal.privacy.sections.retention.items.tax
• legal.privacy.sections.retention.items.account
• legal.privacy.sections.retention.items.usage
• legal.privacy.sections.retention.items.marketing

After the retention period expires, we securely delete or anonymize your data in accordance with our data deletion procedures.

You have the following rights regarding your personal data:

• legal.privacy.sections.rights.items.access
• legal.privacy.sections.rights.items.rectify
• legal.privacy.sections.rights.items.erase
• legal.privacy.sections.rights.items.restrict
• legal.privacy.sections.rights.items.portability
• legal.privacy.sections.rights.items.object
• legal.privacy.sections.rights.items.withdraw

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within 30 days.

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).

We implement industry-standard security measures to protect your data from unauthorized access, alteration, disclosure, or destruction:

• 256-bit AES encryption for data at rest
• TLS 1.3 encryption for data in transit
• UK-hosted infrastructure (Portsmouth)
• Regular security audits and penetration testing
• Role-based access controls and audit logging
• Multi-factor authentication for sensitive operations

While we take every precaution to secure your data, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

We do not sell your personal data. We may share your information with the following categories of third parties:

• legal.privacy.sections.sharing.items.hmrc
• legal.privacy.sections.sharing.items.cloud
• legal.privacy.sections.sharing.items.payment
• legal.privacy.sections.sharing.items.bank
• legal.privacy.sections.sharing.items.analytics
• legal.privacy.sections.sharing.items.support

All third-party service providers are contractually bound to process data in accordance with UK GDPR and our instructions. We conduct regular due diligence to ensure compliance.

Your data is primarily stored on servers located in Portsmouth, United Kingdom. In some cases, data may be transferred to countries outside the UK for processing by our service providers.

Where transfers occur to countries without an adequacy decision, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the ICO.

Fylix is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal information, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes via email or through a prominent notice on our platform.

The "Last Updated" date at the bottom of this page indicates when the policy was last revised. Your continued use of Fylix after changes are posted constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: