Privacy Policy

Financial Agent Accounting Ltd · Effective date: 1 September 2026 · Version 1.0

1. Who we are

MyNet products (including MyNetTax, MyNetDeposit and MyNetRent) are operated by Financial Agent Accounting Ltd, a company registered in England and Wales (company number 16293411), registered office: 99 Long Street, Middleton, Manchester, M24 6UN ("we", "us"). We are the data controller for the personal data described in this policy.

Contact for privacy matters: [email protected].

2. What data we collect

Category	Examples	Where it comes from
Account & identity	Name, email address, phone number, language preference, login credentials	You, when you register
Financial account data	Bank account details, balances, transactions, income and spending patterns	Your banks, via FCA-regulated Open Banking providers — only after your explicit consent, and only when you press the sync button
Tax data	Self Assessment and Making Tax Digital information you prepare and choose to submit	You; HM Revenue & Customs (HMRC), through their official APIs, with your authorisation
Documents	Receipts, invoices and statements you upload or scan	You
Technical data	Device type, app version, IP address, essential usage logs	Your device, automatically

We never receive or store your online banking passwords. Bank connections are made through FCA-authorised Open Banking providers using secure, read-only access that you can revoke at any time. Under Open Banking rules your consent to access account information lasts up to 90 days; after that we will ask you to re-confirm (re-consent) before we can refresh your data, and access simply pauses until you do.

3. Why we use your data (lawful bases)

To provide the service (performance of a contract): categorising your transactions, preparing tax figures, building evidence reports you request.
With your consent: connecting bank accounts; sharing an evidence report with a third party you choose (for example a letting agent or mortgage broker); each share is explicit, logged, and revocable.
Legal obligations: record-keeping, responding to lawful requests, tax submission requirements.
Legitimate interests: keeping the service secure, preventing fraud and abuse, improving reliability — always balanced against your rights.

We do not sell your personal data. We do not use your financial data for third-party advertising.

4. Who we share data with

Open Banking providers — the FCA-authorised account information service provider(s) we work with, to establish and maintain the bank connections you authorise. We act under their regulatory permission (agent model) until we hold our own.
HMRC — only the submissions you explicitly confirm. Nothing is submitted automatically; the flow is always prepare → preview → confirm → submit.
Recipients you choose — when you share an evidence report via a secure link, the person you send it to can view it until the link expires or you revoke it.
Service providers — hosting, payment processing (Stripe) and support tooling, under data processing agreements.
Our regulated partner brokerage — only if you ask to be introduced for mortgage or insurance advice.

5. International transfers

Your data is stored in the UK/EEA. Where a service provider processes data outside the UK/EEA, we rely on UK adequacy regulations or International Data Transfer Agreements / Standard Contractual Clauses.

6. How long we keep data

Account data: while your account is active and for up to 12 months after closure. Tax records you submit: up to 6 years, in line with HMRC record-keeping expectations, unless you ask us to delete them earlier where the law allows. Revoked share links become inaccessible immediately.

7. Your rights

Under UK GDPR you can: access your data; correct it; delete it; restrict or object to processing; take your data with you (portability); and withdraw consent at any time — bank connections and shared links can be revoked in one tap inside the app. To exercise any right, email [email protected]. We respond within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO): ico.org.uk.

8. Security

Data is encrypted in transit and at rest. Access is limited by role and logged. Bank connections use read-only Open Banking access through FCA-regulated providers. We operate separate environments for testing and production, and test environments never contain real customer data.

9. Cookies

Our website uses only essential cookies (session and preference, such as your theme choice). We do not use advertising or cross-site tracking cookies. If we introduce analytics cookies in future, we will ask for your consent first.

10. Children

MyNet services are for adults aged 18 and over. We do not knowingly collect data from children.

11. Changes to this policy

We will post any changes on this page and, for material changes, notify you in the app or by email before they take effect.