Privacy Policy

Last updated: March 2026

Introduction

Trebo Ltd (trading as #MTDone!, company number 17107892) (“we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what personal information we collect when you use our website and services, how we use it, and your rights in relation to it. We are registered as a data controller with the Information Commissioner's Office (ICO registration number ZC112274) under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By using our services, you confirm that you have read and understood how we handle your personal data. If you do not agree with our practices, please discontinue use of our services immediately and contact us to request deletion of any data we hold about you.

Data We Collect

We collect information you provide directly to us, including your name and email address when you register for an account. We also collect information about the properties you manage, rental income and expenses you record, and bank account data obtained via Open Banking connections you authorise through our Plaid integration.

We collect technical data automatically when you visit our website, including your IP address, browser type, operating system, pages visited, and time spent on the site. We use this data solely for improving our service and troubleshooting technical issues. We do not use it to build advertising profiles or sell it to third parties.

How We Use Your Data

We use your personal data to provide and operate the #MTDone! service, including processing your HMRC Making Tax Digital submissions on your behalf, maintaining your financial records, and sending you service-related communications such as submission confirmations and account notifications. We process this data on the legal basis of contractual necessity — it is required to deliver the service.

We may also use your data to comply with legal obligations, including responding to lawful requests from regulatory authorities, and to protect the security and integrity of our systems. We will contact you about product updates and improvements only where we have a legitimate interest or where you have given explicit consent.

Data Sharing & Sub-processors

We share your data only where necessary to deliver our service. Each sub-processor is bound by a data processing agreement and is prohibited from using your data for any purpose other than providing services to us. Our current sub-processors are:

We submit tax data to HMRC on your behalf, as authorised by you. We do not sell, rent, or trade your personal data to any third party for marketing purposes. We will never share your financial data with other landlords, letting agents, or property platforms.

International Data Transfers

Some of our sub-processors are based in the United States. Where personal data is transferred outside the United Kingdom, we ensure appropriate safeguards are in place in accordance with UK GDPR, including the use of standard contractual clauses approved by the ICO, or reliance on the recipient's participation in recognised data protection frameworks. Your core application data (database, documents) is stored in the AWS London region (eu-west-2).

Data Retention

We retain your account data for as long as your account is active. If you close your account, we delete your personal data, except where we are required by law to retain it. Bank connection tokens are deleted immediately upon disconnection of a bank account.

Your Rights

Under UK GDPR, you have the right to access the personal data we hold about you, to request correction of inaccurate data, to request deletion of your data (subject to legal retention obligations), to restrict or object to processing, and to receive your data in a portable format. You also have the right to withdraw consent at any time where processing is based on consent, and to lodge a complaint with the ICO at ico.org.uk.

To exercise any of these rights, contact us at contact@mtdone.co.uk. We will respond to all requests within 30 days. We may need to verify your identity before processing your request.

Cookies

We use cookies and similar technologies to operate our service and improve your experience. Essential cookies are required for the site to function and cannot be disabled. You can manage your cookie preferences at any time — see our Cookie Policy for full details.

Contact Us

If you have any questions about this Privacy Policy or the way we handle your personal data, please contact our Data Protection Officer at contact@mtdone.co.uk, or write to us at Trebo Ltd, 66 Paul Street, London, EC2A 4NA, United Kingdom. We aim to respond to all privacy enquiries within five working days.