Last modified 19 August 2026
We protect your personal data in line with the requirements of the General Data Protection Regulation (GDPR). The GDPR requires data controllers such as ourselves to document our lawful basis for processing personal data. It also gives you rights over how your data is processed. This privacy policy documents the data we collect, why and how we process it, and how to exercise your rights.
The data controller responsible for this website is 2M Tax Services Limited, who can be contacted at 64b The Brache, Maulden, Bedford, Bedfordshire, MK45 2DS.
This website contains links to third-party websites, which have their own data controllers and privacy policies. This privacy policy applies only to this website.
For each method by which we collect personal data, this privacy policy documents our lawful basis for processing the data. Where we rely on your consent to process your data, we explain how you can withdraw your consent and delete your data.
The GDPR gives you rights over how your personal data is processed. You can exercise your rights by contacting us.
You have the right to complain to us, or to the Information Commissioner’s Office, about our processing of your data. To make a complaint to us, please contact us by phone on 07725 070100 or by email at mark@2mtaxservices.com, including your name, a way to reach you, and details of your complaint.
The GDPR requires us to implement appropriate technical measures to protect data. We verify the identity of any individual who requests access to data before granting access. We use Transport Layer Security (TLS, also known as SSL) to encrypt any data you supply to us through our website.
In addition to any sharing of data described elsewhere in this privacy policy, we may disclose data for legal reasons. If we suspect criminal activity we may disclose data relating to those involved or affected to the appropriate authorities. We may also be obliged to disclose data if we receive a request from an appropriate authority.
We may occasionally make changes to this privacy policy. Following any changes, the date at the top of this privacy policy will be updated. If any change allows for wider access to data, such changes will only apply to data collected after the date of the updated privacy policy.
Cookies are small pieces of text that are stored by your browser. For more information on the cookies we use, see our cookie policy.
Our site is hosted by Netlify, Inc. Netlify logs requests to our site in order to operate the hosting service and to detect and block suspicious traffic. For more information on how Netlify handles the data it collects, see Netlify’s privacy policy.
Lawful basis for processing: Compliance with a legal obligation
Why? To comply with the GDPR obligation to implement appropriate technical measures to protect data.
When you complete our Employment Tax Risk and Opportunity Assessment, your responses and contact details (name, company, job title, email, phone number, and your answers to the assessment) are processed by Formspree, Inc. in order to deliver your submission to us by email. For more information on how Formspree handles the data it collects, see Formspree’s privacy policy.
Lawful basis for processing: Pursuance of our legitimate interests
Why? To enable us to receive and respond to Employment Tax Risk and Opportunity Assessment submissions.
If you request a copy of your assessment output, your email address and a summary of your results are processed by EmailJS in order to send you that copy directly from our official Microsoft 365 (Outlook) mailbox. For more information on how EmailJS handles the data it collects, see EmailJS’s privacy policy.
Lawful basis for processing: Pursuance of our legitimate interests
Why? To provide you with a copy of your assessment output and to maintain our own record of correspondence with you.