Privacy Policy

1. Who we are

This site (salarygrid.uk) is operated as a free, open-source utility for UK PAYE and Scottish Income Tax modelling. For the purposes of UK GDPR and the Data Protection Act 2018 we are the data controller for any personal data we incidentally process while serving the site, including IP-derived analytics performed by our advertising partner.

You can contact us with privacy questions, data-subject access requests or complaints at [email protected]. If you are not satisfied with our response you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

2. What we do not collect

To be unambiguous about what does not happen on this site:

• We do not transmit your gross salary, pension contribution, tax code, region, partner income, hourly rate, overtime hours, day rate or any other calculator input to our servers or to any third party. The full calculation pipeline is shipped as JavaScript to your browser and executes locally there.
• We do not ask for, or accept, any account or registration. There is no login, no email gate, and no membership.
• We do not store calculation history. Refreshing the page resets the form to defaults unless you choose to capture a scenario into the URL using the Share this calculation button, in which case the scenario travels inside the link itself — we do not retain a copy.
• We do not use analytics products that fingerprint visitors (no Google Analytics, no Plausible, no Mixpanel, no Hotjar, no session-recording tooling).

3. What we do process

3.1 Server logs (legitimate interest)

Our hosting provider — Cloudflare Pages — automatically processes request metadata to deliver the site and protect it from abuse. This includes your IP address, user-agent string, requested URL, response status and a timestamp. These logs are retained by Cloudflare under their own privacy terms and are not exported or aggregated by us. The legal basis is legitimate interest (delivering a working website and protecting it from attacks). See Cloudflare's Privacy Policy for full details.

3.2 Advertising via Google AdSense (consent)

SalaryGrid.uk shows clearly-labelled Google AdSense placements with fixed dimensions so that ads cannot push your content around the page when they load. When you visit the site, Google AdSense may set or read cookies and similar identifiers from your device for the purposes of:

• Selecting and serving the ads you see, including frequency capping;
• Measuring ad performance and detecting invalid traffic;
• Optionally personalising ads based on your prior interactions with Google services (only when you have given consent through the Google-managed consent dialog).

The legal basis for cookies that are strictly necessary to serve the ads is legitimate interest; the legal basis for any personalisation cookies is your explicit consent, recorded via Google's Funding Choices consent banner.

You can withdraw consent or stop personalisation at any time:

• Visit Google Ad Settings to turn off personalised advertising across Google products;
• Visit Your Online Choices to opt out of personalised advertising from participating third-party networks;
• Clear cookies for salarygrid.uk, googleadservices.com and doubleclick.net in your browser settings.

Google's full data-processing terms for publishers like us are at privacy.google.com/businesses/adsservices.

3.3 Google Fonts

We load the Inter and JetBrains Mono typefaces from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Google may process your IP address when those font files are fetched. We do not pass any other personal data to Google as part of this request.

3.4 Affiliate link clicks (legitimate interest)

Some outbound links to partners are affiliate links, marked as such on the page (see our disclosure). They route through salarygrid.uk/go/…, which records an anonymous, aggregate count — the partner involved, the type of page the click came from, and the date — then forwards you to the partner. No cookie, no IP address and no device fingerprint is stored against that count; it cannot be tied back to you. We keep it only to understand which pages are useful, and it is consistent with our no-tracking stance. The legal basis is legitimate interest.

4. Cookies — full inventory

We do not set any first-party cookies of our own. The list above is indicative — Google occasionally updates the names of its cookies; the authoritative current list is published by Google at policies.google.com/technologies/cookies.

5. Your rights under UK GDPR

Because we deliberately hold almost no personal data, most data-subject rights resolve trivially: there is nothing to access, nothing to rectify, nothing to erase, nothing to port. The rights still formally apply, and they are:

• Right of access. You can ask us what personal data we hold about you. Our standard reply is "request metadata in Cloudflare logs, indexed only by IP address, retained per their policy" — but we will confirm in writing on request.
• Right to rectification.
• Right to erasure ("right to be forgotten").
• Right to restrict processing.
• Right to object to processing carried out on the basis of legitimate interest (e.g. ad-serving cookies that aren't strictly necessary).
• Right to data portability for any personal data processed on the basis of consent or contract.
• Right to lodge a complaint with the ICO at ico.org.uk.

For any request, please email [email protected]. We aim to respond within one calendar month.

6. International transfers

Cloudflare and Google operate globally; your request and any ad-serving traffic may be processed in jurisdictions outside the UK. Both providers rely on UK International Data Transfer Agreements (or equivalent Standard Contractual Clauses with the UK Addendum) to legitimise those transfers.

7. Children

SalaryGrid is aimed at working adults paying UK Income Tax. We do not knowingly process the personal data of children under 13. If you believe a child has interacted with the site in a way that requires intervention, please email [email protected].

8. Changes to this policy

We will update this policy when our processing changes — most likely if we add or remove an advertising partner, or if the law changes. The "Last updated" date at the top of this page is authoritative; for significant changes we will surface a notice on the home page for a reasonable period.