Privacy Policy

Last updated: 10 October 2026

ISAPlan respects your privacy. This policy explains what information is collected and how it is used when you visit this website, use the free calculators, buy the Advanced ISA Planner, sign up for reminder emails, or contact us.

Who we are and how to contact us

This website is run by ISAPlan, a trading name of Marble Cage Limited ("we"), which decides how the personal data described in this policy is used. You can contact us via the Contact page.

Trading name: ISAPlan
Registered company: Marble Cage Limited
Registered in: England and Wales
Company number: 17529115
Registered office: 82, Suite A James Carter Road, Mildenhall, IP28 7DE
Email: hello@isaplan.co.uk

Information We Collect

We may collect:

Information you provide when contacting us: your name, email address, the topic you choose and your message. The contact form is provided by Netlify Forms, our hosting provider's form service, which stores the submission and passes it to us.
Information from your purchase, if you buy the Advanced ISA Planner: the email address you give at checkout (Stripe passes it to us), which we keep to send you your private link and to confirm your right to access the planner; the checkout session reference; the dates of the purchase and of access; whether you ticked the box confirming that access starts immediately, with the time you ticked it and the version of the wording you were shown; and, if access later ends, the date and the reason (a full refund or a dispute).
Payment details are handled by Stripe, which takes the payment on its own checkout page. We do not receive or keep your card details.
Your email address, if you sign up for tax-year reminder emails (see Reminder Emails below).
Basic technical data such as IP address, browser type, and pages visited, in the server logs of our hosting provider, Netlify.
Usage data from Google Analytics, to understand how the site is used, only if you accept analytics cookies (see Cookies below). If you buy the planner and have accepted analytics cookies, a purchase event is sent to Google Analytics with the checkout session reference and the value of the purchase. It does not include your email address.

Our free calculators and planning tools do not require personal information: the figures you type in are processed in your browser and are not sent to us. The Advanced ISA Planner opens from the private link we email to you after you buy it, so the purchase information above applies to it.

How We Use Information

We use information only to:

Respond to enquiries
Email you your private link, check that it is valid when you open the Advanced ISA Planner, and give you that access
Keep a record of the purchase for support, refunds, disputes and our accounts
Send tax-year reminder emails, if you have asked for them and confirmed your email address
Improve website performance and usability
Monitor traffic and maintain site security

We do not sell personal data. Email reminders are sent only to people who asked for them and confirmed their email address.

Reminder Emails

If you sign up for tax-year reminder emails, we store your email address; whether it is waiting to be confirmed, confirmed or unsubscribed; the version of the wording you agreed to and when you agreed to it; the page the sign-up form was on; the dates on which you confirmed and unsubscribed, and how you unsubscribed; and a record of which reminder emails were sent to the address. We also keep the technical records needed to run the list: the codes behind the confirmation and unsubscribe links, when confirmation emails were sent, and, for each reminder, the email service's reference for it or its error message. If you sign up again after unsubscribing, the dates of your earlier sign-up are kept with the new one. We do not store your IP address with your sign-up; our hosting provider's server logs record it, as described under Information We Collect. The emails contain no tracking images and no tracked links.

We send up to four reminder emails a year, and only after you have confirmed your email address by opening the link in the confirmation email. The emails are sent on our behalf by Resend (Plus Five Five, Inc., based in the United States), an email delivery service, which processes your email address and the content of each email in order to deliver it. Resend publishes the safeguards it applies to transfers of personal data outside the UK in its data processing agreement. The list of email addresses is kept in our own database, which is provided by Supabase.

We keep your email address for as long as you are signed up. An address that is never confirmed is deleted 30 days after the sign-up form was sent. After you unsubscribe, the address, the record of your sign-up and the record of the reminder emails sent to it are deleted after 30 days.

To unsubscribe, use the link in any reminder email. You can also ask us to remove your address via the Contact page.

Planner Purchases

If you buy the Advanced ISA Planner, Stripe processes the payment. We do not receive or keep your card details. Stripe passes us the email address you gave at checkout, and we use it to send your private link and to confirm your right to access the planner.

The private link is sent by Resend, our email delivery service. The access record (the checkout session reference, your email address, the dates, whether the box confirming that access starts immediately was ticked, with the time and the version of the wording shown, and the date and reason if access later ends) is stored in our database, which is provided by Supabase. If access ends because of a full refund or a dispute, we also email you a short notice, sent by the same service.

When you open your private link, one strictly necessary cookie, planner_access, is set in your browser so that the planner stays open for you. It is not used for tracking. See our Cookies Policy.

Cookies

This website uses Google Analytics cookies for basic analytics only if you accept them in the cookie banner. Nothing from Google Analytics is loaded until you accept, and you can change your choice at any time using the "Cookie settings" button at the bottom of every page. If you open your private link for the Advanced ISA Planner, one strictly necessary cookie is set so that the planner stays open for you. See our Cookies Policy for the full list of cookies and browser storage and how long each lasts.

Third Parties

We use trusted third-party services to operate the website. They process information on our behalf under their own terms and privacy policies:

Netlify: hosting, server logs and the contact form (Netlify Forms)
Supabase: our database, which stores the access record for Advanced ISA Planner purchases and the reminder email list
Stripe: payment for the Advanced ISA Planner
Resend (Plus Five Five, Inc.): sending the private link email after a planner purchase and the reminder emails, if you sign up for them
Google: Google Analytics (only after you accept analytics cookies)

Links to external websites are provided for convenience. We are not responsible for their content or privacy practices.

International Transfers

Netlify, Supabase, Stripe, Resend and Google are US companies, so information they handle for us may be stored or accessed outside the UK. Resend publishes the safeguards it applies to such transfers (linked earlier on this page); for the others, see their own privacy information.

Data Retention

Personal data is kept only for as long as necessary for the purposes outlined in this policy, or where required by law. Contact-form messages are kept until we delete them; we have not set a fixed period. The access record for a planner purchase is kept for as long as you have access and then for 6 years after access ends, to deal with refunds, disputes and our records; purchase records are kept for as long as our accounting records require. Analytics data is kept for the period set in Google Analytics. The Cookies Policy says how long the cookies last in your browser, not how long Google keeps the data.

Your Rights

You have the right to access, correct, or request deletion of personal data we hold about you. You may also object to certain types of processing.

Requests can be made via the Contact page. You can also complain to the Information Commissioner's Office (ico.org.uk).

Security

We take reasonable steps to protect personal data. However, no online system can be completely secure.

Updates

This policy may be updated to reflect legal or website changes. Any updates will be published on this page.