Privacy Policy
Last updated: December 2025
This Privacy Policy explains how personal data is collected, used, and shared when you use CGT Sorted (the “Service”). CGT Sorted is a UK-focused capital gains tax tracking and calculation tool for individuals.
1. Who We Are
CGT Sorted is operated by:
Lancelot Lachartre
Sole trader, United Kingdom
Email: lancelot@cgtsorted.com
For the purposes of UK data protection law and the UK GDPR, Lancelot Lachartre is the data controller.
2. Personal Data We Collect
We collect only the personal data necessary to operate the Service.
2.1 Account Information
- First name
- Last name
- Email address
This information is used to create and manage your account and to communicate with you about the Service.
2.2 Financial and Transaction Data
When you use CGT Sorted, you may upload or enter information relating to your investment activity, including:
- Buy and sell transactions
- Dates, quantities, prices, fees, and currencies
This data is used solely to provide capital gains calculations and related outputs within the Service.
2.3 Usage and Technical Logs
We collect limited technical logs for operational and debugging purposes, such as:
- Which API endpoints are called by a given user ID
- Basic response metadata
We do not intentionally collect IP addresses or set cookies server-side.
2.4 Payment Data
We do not collect or store payment card details. Payments are processed entirely by Stripe, a third-party payment processor. Stripe handles payment information in accordance with its own privacy policy.
3. How We Use Personal Data
We use your personal data to:
- Provide and operate the Service
- Store and process your uploaded transaction data
- Authenticate users and send essential service emails (e.g. login links)
- Process payments and manage access to paid features
- Monitor usage and maintain the security and reliability of the Service
We do not use your data for advertising, profiling, or automated decision-making.
4. Legal Bases for Processing
Under UK GDPR, we rely on the following legal bases:
- Performance of a contract: Processing is necessary to provide the Service you sign up for
- Legitimate interests: Limited logging and analytics to operate, secure, and improve the Service
- Consent: Marketing emails, where applicable, with the ability to opt out at any time
5. Analytics
We use PostHog to collect high-level usage analytics. This helps us understand how the Service is used and improve functionality.
Analytics processing is based on our legitimate interest in operating and improving the Service.
6. Data Storage and Location
Your data is stored using Supabase, hosted on AWS in the eu-west-2 (United Kingdom) region.
We also rely on Supabase-managed backups as part of our hosting plan.
7. Data Retention
- Transaction and profile data is retained while your account is active
- If you stop paying, your data is retained for up to 2 years
- Supabase backups may retain data for limited periods in accordance with their backup policies
You may request deletion earlier as described below.
8. Account Deletion and Your Rights
8.1 Account and Data Deletion
- You can delete individual profiles (which contain transaction data) directly within the Service
- To delete your entire account, contact: lancelot@cgtsorted.com
8.2 Your Data Protection Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict certain processing
- Withdraw consent for marketing communications
To exercise these rights, contact lancelot@cgtsorted.com.
9. Data Sharing
We do not sell or share your personal data.
Data is only processed by trusted service providers where necessary to operate the Service, including:
- Supabase (hosting and database)
- Stripe (payments)
- PostHog (analytics)
These providers process data on our behalf and under appropriate contractual safeguards.
10. Children’s Data
CGT Sorted is intended for adults and UK taxpayers. We do not knowingly collect personal data from children.
11. Emails and Communications
We send:
- Essential service emails (e.g. authentication, account notices)
- Marketing emails (where applicable), with a clear opt-out option
You can unsubscribe from marketing emails at any time.
12. Automated Calculations Disclaimer
CGT Sorted provides automated calculations based on user-provided data and open-source software. We do not provide tax, accounting, or legal advice. You are responsible for verifying results and determining their suitability for your personal circumstances.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on the CGT Sorted website, with the updated date shown at the top.
14. Contact
If you have any questions about this Privacy Policy or how your data is handled, contact: