Privacy and Cookie Policy

Last updated: 26 July 2026

This policy explains how Wentry Ltd ("Wentry", "we", "us") collects and uses personal data on wentry.tax, including the Accounting Health Check, and in connection with the Wentry service. Wentry Ltd is the data controller. Contact: support@wentry.co.uk.

1. What we collect

• Health-check answers: the information you provide in the questionnaire — income ranges, business and property circumstances, tax arrangements, employment of staff, household cost ranges, residency/immigration status category, and similar. Answers are collected to build your personal report and are stored only after you verify your contact details.
• Contact details: your email address, verified by one-time code.
• Payment data: processed entirely by Stripe. We receive confirmation of payment and subscription status; we never see or store your card details.
• Technical and analytics data: if you consent to analytics, we collect device and browser type, operating system, page and assessment-screen views, timestamps, referral source, campaign parameters (UTM), and interaction events. We do not send your questionnaire answers, raw email address or verification code to our analytics provider.

2. How we use your data

• To generate and send your personal report and deadline reminders.
• To provide the Wentry service if you subscribe, including the identity (KYC) and anti-money-laundering (AML) checks we are required by law to perform before providing accounting services.
• To send service messages you request or that are necessary for the service, including verification codes, receipts, identity-verification invitations and trial reminders. We only send optional marketing emails where permitted by law and provide a way to unsubscribe.
• If you consent to analytics, to understand completion and abandonment at each assessment screen, diagnose technical problems, compare mobile and desktop use, and improve the service.
• If you consent to marketing technologies, to measure advertising performance. Meta may receive an event name and time, page URL, currency and value, and hashed identifiers such as a normalised email address and internal lead ID for matching and attribution. We never send Meta your questionnaire answers, income information, OTP code or residency/immigration answer.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

3. Legal bases

We rely on: consent for optional product analytics, session replay and advertising measurement; contract and steps taken at your request before entering a contract for providing the assessment and service you request; legal obligation for KYC/AML checks and tax and accounting record-keeping; and legitimate interests for security, fraud prevention, service administration and responding to enquiries where those interests do not override your rights. You can withdraw analytics or marketing consent at any time using the Cookie settings control on the Accounting Health Check.

4. Confidentiality and legal disclosures

We treat your information as confidential and use it only as described here. As a provider of accountancy services we are subject to legal obligations — including under the Money Laundering Regulations 2017 — that may require disclosures to authorities. No confidentiality commitment can override obligations imposed on us by law.

5. Retention

• Health-check data where you do not become a client: deleted within 12 months.
• Client records: retained for as long as required by law (typically at least 5 years after the relevant filing deadline for tax records).
• KYC/AML records: retained for the periods required by the Money Laundering Regulations 2017.
• Your cookie preference is stored for up to 180 days, after which we ask you again.
• Product-analytics events are retained for up to 12 months. Masked session recordings are retained for up to 90 days. We may delete or aggregate them sooner when they are no longer needed.

6. Processors and transfers

We use carefully selected service providers, including Supabase (authentication and database hosting), Vercel (website hosting), Stripe (payments), Veriff (identity verification), Resend and other email-delivery providers, PostHog Cloud EU in Frankfurt (product analytics and masked session replay), and Meta (advertising measurement as described in sections 2 and 8). Where personal data is transferred outside the UK, we rely on an applicable adequacy decision or appropriate safeguards such as standard contractual clauses.

7. Your rights

You have the right to access, correct, delete, restrict or object to the processing of your personal data, and to data portability. To exercise any right, email support@wentry.co.uk. You can also complain to the Information Commissioner's Office (ico.org.uk).

8. Cookies and similar technologies

When you first visit the Accounting Health Check, we offer separate choices for optional Analytics and Marketing technologies. Optional technologies remain off unless you take a positive action to allow them. Rejecting them does not prevent you from completing the assessment or purchasing the service.

• Necessary: storage used for security, email verification, maintaining the requested service and remembering your privacy choice. This is always active because the service cannot operate securely without it.
• Analytics — PostHog: if you consent, PostHog records controlled funnel events and may create a session replay so we can identify confusing screens and technical problems. All input values and all page text are masked in recordings. Autocapture is disabled, and we do not intentionally send questionnaire answers, email addresses, OTP codes or payment details to PostHog. After email verification, events may be linked using our internal lead ID so the browser, payment, KYC and onboarding stages can form one funnel.
• Marketing — Meta: if you consent, Meta Pixel measures browser events and our server may send limited conversion events through Meta Conversions API. These events may use hashed identifiers for matching, as described in section 2. Stripe and Veriff pages are separate services and are not recorded by our PostHog session replay.

You can change or withdraw either optional choice at any time through Cookie settings on the Accounting Health Check. Withdrawal stops future optional collection and clears the relevant browser analytics state where technically available. You can also use browser controls, but our on-site control is the easiest way to manage Wentry’s optional technologies.

Wentry Ltd · support@wentry.co.uk · This policy will be updated as the service evolves; material changes will be notified to registered users.