Last updated: 11 June 2026
I. Data Controller
The controller of your personal data is Global Tax Partners LTD, with its registered office at: 13 High Birch Court, 79 Park Road, New Barnet, United Kingdom, EN4 9QG. The controller acts in accordance with applicable data protection law, including the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council) and the UK GDPR.
II. Contact details
For matters relating to the processing of personal data, please contact us:
- Email: [email protected]
- Telephone (Poland): +48 22 26 62 351
- Telephone (UK): +44 204 577 3027
- Correspondence address: Global Tax Partners LTD, 13 High Birch Court, 79 Park Road, New Barnet, United Kingdom, EN4 9QG
III. Data Protection Officer
The controller has not appointed a Data Protection Officer (DPO), as the statutory conditions for appointing one are not met. Any enquiries relating to data processing should be sent to the email address given in section II.
IV. Purposes and legal bases for processing data
Your personal data is processed for the following purposes and on the following legal bases:
- Performance of a contract for the provision of legal, accounting and advisory services - Article 6(1)(b) GDPR
- Compliance with legal obligations incumbent on the controller (including tax, accounting, AML and reporting obligations) - Article 6(1)(c) GDPR
- Legitimate interests of the controller (including protection against claims, debt recovery, maintaining correspondence and ensuring the security of IT systems) - Article 6(1)(f) GDPR
- Consent of the data subject (including marketing activities, the newsletter and push notifications in the app) - Article 6(1)(a) GDPR
V. Categories of personal data processed
Depending on the purpose and nature of the relationship with the controller, we process the following categories of data:
- Identification data: first name, surname, PESEL (where required by law), NIP (Polish tax identification number), UTR (UK)
- Contact data: email address, telephone number, correspondence address
- Business data: company name, registered office address, NIP/CRN, KRS/Company Number, legal form
- Financial data: invoicing details, bank account details, transaction data
- App authentication data: encrypted password (bcrypt), session tokens, one-time login tokens
- Technical and app activity data: IP address, device identifier, system logs, data on use of the app
VI. Global Tax Partners mobile app
Global Tax Partners LTD makes a mobile app available to clients at app.globaltax.partners and on Google Play. The app is intended exclusively for adults (18+) who are active clients of the firm. Using the app requires an account to be created by the firm's administrator - self-registration is not possible.
Within the mobile app we process the following data:
- Account data: first name, surname, email, telephone, NIP or UTR, company name, country of tax filings (PL/UK), service plan
- Authentication data: encrypted password (bcrypt algorithm), session tokens (JWT), one-time login tokens (magic link)
- Technical data: device identifier, push notification subscription endpoint, IP address, error logs (crash logs), app activity data (sections opened, time of use)
- Taxxo integration data: Taxxo Power API key assigned to the client's account, invoice data retrieved from the Taxxo system (number, issuer, amount, payment status, issue and payment dates)
The app uses Local Storage and Service Worker technologies to store session data and cache resources so that it can work offline. Data stored locally remains solely on the user's device and is deleted on logout or when the app is uninstalled.
VII. Push notifications
Once the user has given consent, the app sends push notifications concerning matters related to accounting services - including invoice status (paid, overdue), messages from your adviser and important tax deadlines. Notifications are delivered by Mozilla servers (autopush.services.mozilla.com) or Google servers (Firebase Cloud Messaging), depending on the user's browser or device.
The user may disable notifications at any time in the "Profile" section of the app or in the settings of the operating system or browser. Disabling notifications does not affect the other functionalities of the app.
VIII. Cookies and local data storage
The globaltax.partners website uses cookies in order to:
- Ensure the website functions correctly (functional cookies - essential)
- Remember user preferences (preference cookies)
- Analyse usage statistics (analytics cookies)
- Display personalised marketing content (marketing cookies)
The user may change cookie settings at any time in the consent management panel available on every subpage. The mobile app uses only Local Storage and IndexedDB technologies to store data necessary for its operation (session token, language preferences, content cache).
IX. Integrations with external services
In connection with the services we provide and the app, we use the following external services:
- Taxxo Power (platforma2.taxxo.pl) - retrieving the client's invoices from their accounting records
- Resend (resend.com) - sending emails (notifications, login links, password resets)
- Google Play / Firebase - delivering the app and push notifications to Android devices
- Mozilla Push Service - delivering push notifications in Firefox browsers
- Currency, metals and stock index rate APIs - displaying market data in the app (public data, containing no information about the user)
- Google Analytics (on the website, with the user's consent) - analysing website traffic
Each provider operates in accordance with its own privacy policy and is contractually obliged to protect data in accordance with the GDPR. A full list of processors is available on request.
X. Recipients of personal data
Your personal data may be shared with:
- Entities cooperating with Global Tax Partners LTD in providing services (accountants, tax advisers, legal advisers, auditors, partners within the capital group, including Global Accounting)
- Entities providing IT services (hosting, infrastructure maintenance, technical support)
- Banks and payment institutions (to the extent necessary to process payments)
- Public authorities on the basis of applicable law (tax offices, the Social Insurance Institution (ZUS), courts, law enforcement authorities)
- Google Play (for the purposes of distributing the mobile app)
XI. Transfers of data to third countries
The data controller (Global Tax Partners LTD) is based in the United Kingdom. Following the United Kingdom's withdrawal from the European Union, the European Commission issued an adequacy decision (the UK Adequacy Decision of 28 June 2021), which confirms that the United Kingdom provides an adequate level of personal data protection in accordance with the GDPR. Accordingly, transfers of data between EU Member States and the United Kingdom take place on the basis of the adequacy decision.
Where data is transferred to other third countries (outside the EU/EEA/UK), the controller applies Standard Contractual Clauses (SCC) approved by the European Commission or other appropriate safeguards.
XII. Data retention period
Personal data is stored for the period necessary to achieve the purposes for which it was collected, in particular:
- Data of active clients - for the duration of the contract and for 5 years after its termination (in accordance with the Polish Accounting Act - the limitation period for tax liabilities)
- Invoicing data and accounting documents - 5 years from the end of the calendar year in which the tax liability arose
- Data processed on the basis of consent (e.g. marketing) - until consent is withdrawn
- Technical app data (logs, crash logs) - 90 days
- Session and login tokens - up to 24 hours (magic link login) or until logout
- Unused password reset tokens - 1 hour
XIII. Rights of the data subject
Data subjects have the right to:
- Access their personal data
- Rectify (correct) their data
- Erase their data ("the right to be forgotten")
- Restrict the processing of their data
- Data portability (transfer of data to another controller)
- Object to the processing of their data
- Withdraw consent to processing at any time (without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal)
- Lodge a complaint with a supervisory authority - in Poland: the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw; in the UK: the Information Commissioner's Office (ICO)
To exercise the above rights, please contact us at: [email protected]
XIV. Automated decision-making and profiling
Global Tax Partners LTD does not use automated decision-making that produces legal effects for the data subject, nor profiling within the meaning of Article 22 GDPR.
XV. Data security
Global Tax Partners LTD has implemented appropriate technical and organisational measures to ensure the security of the personal data it processes, including:
- Encryption of data in transit (HTTPS/TLS)
- Password hashing with the bcrypt algorithm (one-way, irreversible)
- Session tokenisation (JWT with time-limited validity)
- Restricted access to data - only authorised employees and cooperating entities
- Regular system backups
- Monitoring of infrastructure for unauthorised access
- Software updates and security patches
In the event of a personal data breach that may result in a high risk to the rights or freedoms of natural persons, the controller will notify the data subjects within 72 hours of becoming aware of the breach, in accordance with Article 33 GDPR.
XVI. App intended for adults
The Global Tax Partners app is intended exclusively for persons who have reached the age of 18. We do not knowingly collect data from minors. If the controller becomes aware that data of a person under 18 is being processed, that data will be deleted without delay.
XVII. Deleting your account and data in the app
To delete your account in the Global Tax Partners app and all associated data, send an email to [email protected] with the subject "GTP App account deletion". In the body of the message, state the email address assigned to the account. The request will be processed within 30 working days. Once the account has been deleted, you will not be able to use the app or recover your data.
Some data may be retained for longer if required by law (e.g. accounting documents - 5 years under the Polish Accounting Act). This data will not be used for any purposes other than those arising from legal obligations.
XVIII. Changes to the Privacy Policy
Global Tax Partners LTD reserves the right to amend this Privacy Policy in the event of changes in the law, the introduction of new app features or services, or changes in data processing practices. Any changes will be published at globaltax.partners/polityka-prywatnosci/ together with the date of the last update.
In the case of significant changes affecting users' rights, the controller will notify registered clients by email at least 14 days before the changes take effect.
XIX. Contact
If you have any questions about the Privacy Policy or the processing of your personal data, please contact us:
Global Tax Partners LTD Email: [email protected] Telephone: +48 22 26 62 351 (Poland) / +44 204 577 3027 (UK) Address: 13 High Birch Court, 79 Park Road, New Barnet, United Kingdom, EN4 9QG
XX. Final provisions
In matters not regulated by this Privacy Policy, the following apply:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR)
- The Polish Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws 2018, item 1000)
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018 (UK)
This Privacy Policy has been drawn up in Polish. In the event of any discrepancy between language versions, the Polish version prevails.
This Privacy Policy is effective from: 11 June 2026