Privacy

CUNNTAS is a bookkeeping, accounting, payroll and financial administration platform operated by Mayside Partners Limited, a company registered in Scotland under company number SC642690 (“Mayside Partners”, “CUNNTAS”, “we”, “us” or “our”).

This Privacy Policy explains how we collect, use, store and protect personal information when you register for, access or use CUNNTAS.

CUNNTAS is pronounced “KOON-tas”. The name comes from the Scottish Gaelic word cunntas, meaning “account”, “accounts”, “accounting” or “reckoning”, reflecting both the purpose of the platform and its Scottish identity.

Data Protection Registration

Mayside Partners Limited, trading as CUNNTAS, is registered with the Information Commissioner's Office (ICO) for data protection purposes.

As the operator of CUNNTAS, Mayside Partners Limited is responsible for complying with applicable UK data protection requirements in relation to personal information for which it acts as controller and for providing appropriate safeguards where information is processed through CUNNTAS on behalf of an Organisation.

Registration with the ICO forms part of our wider commitment to responsible data handling, transparency and accountability in the operation of CUNNTAS.

1. Information We Collect

We collect information necessary to provide and administer the CUNNTAS service. This may include your name, email address, telephone number, Organisation and business details, account credentials, subscription and billing information, and information you provide while using the platform.

Where you use CUNNTAS for bookkeeping, accounting, payroll or related services, the platform may also process information relating to customers, suppliers, employees, directors, shareholders and other individuals whose information forms part of your Organisation's financial or business records.

When banking services are connected to CUNNTAS, we may process account and transaction information obtained through authorised Open Banking services.

We also collect technical and security information associated with use of the platform, including login activity, IP addresses, browser and device information, security events and audit records.

2. How We Use Personal Information

We use personal information where necessary to operate and secure CUNNTAS, provide the services requested by Users and Organisations, administer subscriptions and payments, provide support, maintain accounting and audit records, communicate with Users, prevent fraud and misuse, comply with legal and regulatory obligations, and improve the operation and reliability of the platform.

Information processed within an Organisation's accounting, bookkeeping or payroll records is used for the purposes for which that Organisation has provided or connected the information.

We do not sell personal information.

3. Organisations Using CUNNTAS

Where an Organisation uses CUNNTAS to process personal information relating to its employees, customers, suppliers or other individuals, that Organisation will ordinarily determine why that information is being processed.

In those circumstances, Mayside Partners Limited processes the information through CUNNTAS for the purpose of providing the contracted service and operating the platform.

Users are responsible for ensuring that information they enter into CUNNTAS has been obtained and is being processed lawfully.

4. Banking Information

Where an Organisation chooses to connect a bank account to CUNNTAS, banking information may be obtained through an authorised Open Banking provider.

CUNNTAS uses this information to provide the banking, reconciliation, bookkeeping and accounting functions selected by the User.

CUNNTAS does not require Users to provide their online banking passwords directly to CUNNTAS. Authentication with a financial institution is undertaken through the relevant banking or Open Banking authorisation process.

5. Payroll Information

Payroll information may include names, addresses, dates of birth, National Insurance information, employment information, salary and payment information, tax information, pension information and other information necessary for payroll administration.

Because payroll records can contain particularly sensitive personal information, access is restricted according to the permissions associated with the relevant User and Organisation.

6. Payments

Where payments are made for CUNNTAS subscriptions or services, payment transactions may be processed by an external payment provider.

We retain the information necessary to administer subscriptions, issue invoices and Credit Notes, reconcile payments and maintain legally required accounting records. We do not need to store complete payment-card details where those details are processed by the payment provider.

7. Security

CUNNTAS uses technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure or loss.

These measures include controlled User access, mandatory Two-Factor Authentication, secure communications, audit records and access controls appropriate to the functions available within the platform.

Users are responsible for keeping their passwords, Authenticator credentials and Recovery Codes secure and must not permit another person to use their CUNNTAS credentials.

8. Service Providers

We may use carefully selected service providers to operate CUNNTAS and provide associated services, including hosting and infrastructure providers, payment providers, communications providers, banking and Open Banking providers, and other technical services required for operation of the platform.

Such providers may process personal information only to the extent necessary to provide their services and subject to appropriate contractual, security and data-protection requirements.

9. Disclosure of Information

We may disclose information where necessary to provide the CUNNTAS service, where authorised by the relevant User or Organisation, where required by law or a lawful regulatory requirement, or where reasonably necessary to protect CUNNTAS, Mayside Partners Limited, our Users or others against fraud, misuse or unlawful activity.

We do not disclose personal information to third parties for their independent marketing purposes.

10. How Long We Keep Information

We retain information for as long as reasonably necessary to provide CUNNTAS services and satisfy applicable legal, accounting, tax, regulatory and security requirements.

Different categories of information may therefore be retained for different periods.

Closing a CUNNTAS account does not necessarily result in immediate deletion of all information. Certain financial, accounting, billing, audit and regulatory records must be retained after an account or subscription has ended.

11. Your Rights

Subject to applicable data-protection law, individuals may have rights concerning their personal information, including rights to request access to information, correction of inaccurate information, deletion in appropriate circumstances, restriction of processing, objection to certain processing and portability of certain information.

Where information is held within the records of an Organisation using CUNNTAS, a request may need to be directed to that Organisation because it determines the purposes for which the information is processed.

12. Cookies and Browser Storage

CUNNTAS uses cookies and similar browser technologies where necessary to operate the platform, maintain authenticated sessions, provide security functions and remember certain User choices.

This includes security cookies associated with login sessions and, where selected by the User, the Trust this browser for 30 days function.

Strictly necessary security and authentication technologies are required for CUNNTAS to function correctly.

Where CUNNTAS uses any non-essential cookies in the future, appropriate information and choices will be provided as required.

13. International Processing

Some service providers used in operating CUNNTAS may process information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate measures to ensure that the transfer is made in accordance with applicable UK data-protection requirements.

14. Changes to This Privacy Policy

We may update this Privacy Policy when CUNNTAS services, legal requirements or our processing activities change.

The current version will be published through CUNNTAS and identified by its Last Updated date.

15. Contact

Questions concerning privacy or the processing of personal information through CUNNTAS may be directed to Mayside Partners Limited. Privacy enquiries may be submitted using the contact details provided through the CUNNTAS platform.

Last Updated: 10 August 2026