Cookie Policy

This Cookie Policy explains how Suma Tax Ltd ("we", "us", "our" — company number 17245779, registered in England and Wales at 16 Crown Farm Close, Coventry, CV3 3JY, England) uses cookies and similar technologies on our website at sumatax.co.uk (the "website"), and the equivalent technologies used in the Suma mobile app. It should be read together with our Privacy Policy, which explains how we handle personal data more generally.

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, to remember your preferences, and to provide information to site owners. "Similar technologies" include local storage, pixels and software development kits (SDKs) in mobile apps that can store or access information on your device. Cookies may be "session" cookies, which expire when you close your browser, or "persistent" cookies, which stay on your device for a set period or until you delete them. UK law (the Privacy and Electronic Communications Regulations, alongside UK GDPR) requires us to get your consent before using any cookies or similar technologies that are not strictly necessary.

Strictly necessary cookies. These are essential for the website to function — for example to keep the site secure, remember your cookie preferences, and (if we offer sign-in on the web) keep you signed in. They cannot be switched off through our banner, but you can block them in your browser settings, in which case parts of the site may not work.

Analytics. We use Vercel Web Analytics and Speed Insights to understand aggregated site usage and performance. These are cookie-free: they do not set cookies on your device and do not give us information that identifies you across websites, which is why they do not appear in the table above. Our lawful basis is our legitimate interest in operating and improving the website.

Advertising measurement (Meta Pixel). If — and only if — you choose "Accept" in our cookie banner, we load the Meta Pixel to measure whether our Meta advertising results in site visits and successful waitlist signups, to create advertising audiences and to improve our campaigns. This shares event data (including page visits, a signup event, your IP address, browser and device information and Meta cookie identifiers) with Meta Platforms Ireland Limited, which may process it under its own privacy and cookie policies. We do not send your submitted email address to Meta. Meta tracking is rejected by default and does not load unless you accept, and rejecting it does not affect your use of the site. Meta states that Pixel event data may be retained for up to two years.

The Suma iOS app does not use browser cookies. It does store limited information on your device for the app to function:

• Session credentials are stored in the secure system keychain so you stay signed in.
• App preferences and cached data (for example your display settings and recently viewed records) are stored locally so the app is fast and works smoothly.
• HMRC fraud prevention information: when you use features that connect to HMRC, certain device information is read and sent to HMRC with each request because the law requires it. This is not used for advertising or analytics. See our Privacy Policy for details.
• Subscription SDK: the app includes the RevenueCat SDK, which stores an identifier on your device to manage your Suma Pro subscription and validate purchases made through Apple. It is used only for subscription management, not advertising.

The app does not contain advertising SDKs and does not track you across other companies' apps or websites.

• Use our cookie banner or the “Cookie settings” link in the website footer to review and change your choices at any time. You can accept or reject with equal effect. Withdrawing consent prevents future Meta events and removes the Meta cookies this site can access, though it does not undo processing that occurred before withdrawal.
• Most browsers let you block or delete cookies through their settings — look for "Privacy" or "Site settings" in Safari, Chrome, Firefox or Edge. Guidance for popular browsers is available at allaboutcookies.org.
• For the Meta Pixel specifically, you can also manage how Meta uses data about your activity on other websites through your Meta "Ads preferences" and "Off-Facebook Activity" settings, and opt out of interest-based advertising via youradchoices.com or youronlinechoices.eu.
• Our website does not currently respond to “Do Not Track” browser signals, because no common standard for interpreting them has been adopted; our cookie banner is the reliable way to control non-essential cookies on this site.
• Blocking strictly necessary cookies may mean parts of the website do not work properly.
• In the app, you can sign out at any time to clear your session, and delete the app to remove locally stored data.

We may update this policy from time to time, for example if we add new cookies or SDKs. The version and date at the top show when it was last changed, and we will ask for fresh consent where the law requires it.

Questions about this policy or our use of cookies? Email support@sumatax.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).