Privacy notice
Your income does not leave your browser.
MayTally is a free UK guide for parents and parents-to-be. The benefits checker runs in your browser. We do not receive, store or send on the figure you type for pay. We do not sell family data. This notice explains what that means in practice, what we may hold if you later ask us to email you, and how to complain.
This is information about how we handle personal data under the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR), and the Data (Use and Access) Act 2025. It is not legal, tax or benefits advice.
Last updated: 10 September 2026.
1. Who we are
MayTally is the public name of the website at https://maytally.co.uk. The site is operated by RETRETO NEXT LIMITED, a private limited company registered in England and Wales. For any personal data we do receive (for example an email address you choose to give us), RETRETO NEXT LIMITED is the controller.
- Company: RETRETO NEXT LIMITED
- Company number: 15166864
- VAT number: GB 493 7070 67
- Registered office: Office 8929, 182-184 High Street North, East Ham, London, United Kingdom, E6 2JA
Those company details match the operator published on the other UK sites hosted on the same server, and the Companies House record checked on 10 September 2026 (status: Active). We have not published an ICO registration number.
Write to us at [email protected]. Please put “data protection” in the subject line if you are exercising a right or making a complaint.
We do not appoint a Data Protection Officer at this stage.
2. The promise in one page
| What you type or see | Does it come to our servers? |
|---|---|
| Gross income, salary, or anything that can be turned back into pay | No. It stays in your browser. |
| National Insurance number | We do not ask for it. If you paste one by mistake, do not send the form to us. |
| Your name | We do not ask for it to run the checker. |
| Full postcode | Stays in your browser. If a tool needs a council area, that lookup should happen on your device. |
| Children’s dates of birth, disability, immigration / NRPF answers | Stay in your browser unless a later optional email step says otherwise — and even then we will not take income. |
| Estimate of benefits you may be missing (a yearly £ figure) | Only if you copy a share card, download it, or ask us to email an action list. That figure is a result, not your income. |
| Email address | Only if you opt in to a save, a recall alert, or a parenting sequence. |
| Brand / model / barcode of a product you look up | Product identifiers, not a family profile. We do not join them to your income. |
The share card is built so it cannot show income, your name or a postcode.
3. What we collect, and why
3.1 Benefits checker (default)
You answer a short questionnaire (nation of the UK, tax year, work status, children, and — if you choose — income). The rules run as a program on your device.
We do not need that questionnaire to reach our servers for the estimate to appear. Clearing your browser data removes any copy saved on your phone or computer.
Lawful basis: we are not taking this information in. Serving the page and the rules file is ordinary website delivery.
3.2 Optional email: save a result or key dates
If you ask us to send the action list or reminder dates, we take only:
- your email address
- the tax year
- the headline yearly totals and confidence label
- the action titles, benefit names, deadlines and official GOV.UK links
- the time you ticked consent
We do not take your income, postcode, name, or the raw questionnaire.
Lawful basis: consent (UK GDPR Article 6(1)(a)). Email is also covered by PECR. Boxes are unticked unless you tick them. You can withdraw consent at any time (see section 8).
3.3 Optional email: product recall alerts
If you ask us to watch a car seat, cot or other item, we take your email address and the product identifiers you chose — not your benefits answers.
Lawful basis: consent, and PECR for the messages.
3.4 Optional email: week-by-week pregnancy notes
If we offer this, we will ask separately. We may store your email and, if you choose, the month your baby is due — not your pay. Pregnancy is health data. We would only keep a due month with your explicit consent (Article 9(2)(a)).
3.5 Corrections and data-protection complaints
If you write to tell us a page is wrong, or to complain about privacy, we keep the email and the text long enough to answer. Please do not include payslips, National Insurance numbers or children’s full names.
Lawful basis: legitimate interests (accuracy and complaint handling), or consent if you prefer to use a form that says so.
3.6 Safety search
Lookups use brand, model, standard marks and barcodes. Those identify a product. We do not use them to rebuild a family. Phase 1 does not read photos you take of a nameplate; you type the text yourself.
3.7 Technical logs
Our host may see an IP address, browser type and the page asked for. We use this to keep the site up and to limit abuse. We do not put questionnaire bodies in server logs.
Lawful basis: legitimate interests — and, where it applies, the recognised legitimate interest in network and information security.
3.8 Analytics and affiliate links
We may record anonymous steps such as “opened the checker” or “opened a recall page”. Those events must not include income, email, postcode or dates of birth.
If we ever use cookies or a third-party analytics tool that is not strictly necessary, we will ask first (PECR).
Affiliate links exist to point you at kit or offers. A click must not carry your checker answers or your income.
We do not sell personal data. We do not use your answers for advertising profiles.
4. Special category and children’s data
Some checker questions can touch health (pregnancy, a disabled child) or immigration (no recourse to public funds). By default those answers stay on your device. We do not want them on our servers for v1.
MayTally is written for adults who are pregnant or caring for a child. We do not offer accounts to children and we do not try to collect data from children.
5. Who we share data with
We do not share income, because we do not have it.
If you have opted in to email, a mail provider will process the address and the allowed action-list fields, only on our instructions. Hosting and security providers may see technical logs.
We will name those processors here once they are chosen for launch.
We may disclose information if the law requires it. We will not hand a family questionnaire to an advertiser or an affiliate network.
Official claim forms live on GOV.UK and similar sites. Leaving MayTally is your choice; those departments have their own notices.
6. Transfers outside the UK
We aim to keep any email list and logs in the United Kingdom or in a country the UK has found adequate (including the EEA). If a supplier is further afield, we will use a UK-approved transfer tool and say so here.
We will not send a family’s checker profile to an overseas “AI” service to get a second opinion.
7. How long we keep it
| What | How long |
|---|---|
| Answers in your browser | Until you clear the site data, or the browser expires them |
| IP / technical logs | Up to 30 days, unless we must keep a record of an attack |
| Email + action list or recall watch | Until you unsubscribe or ask us to delete, then within 30 days |
| Correction emails | 12 months after we close the point (longer if there is a dispute) |
| Data-protection complaint file | 2 years after we close it |
8. Your rights
You can ask us to:
- give you a copy of what we hold
- correct it
- delete it
- restrict how we use it
- send it to you in a portable form (for data we hold, such as an email and a saved action list)
- stop processing that we do on legitimate interests
- withdraw consent (for email, use the unsubscribe link or write to us)
We do not run automated decisions that produce legal or similarly significant effects. The checker is information and guidance only. It does not decide a claim.
To use a right, email [email protected]. We will need to check that the request comes from the owner of the address. We will not ask for a passport or National Insurance number for a simple deletion.
9. Complaints (including the right to complain to us first)
From 19 June 2026, UK law says you can complain to us about how we use personal data, as well as to the regulator.
- Email [email protected] with the subject “Data protection complaint”.
- We will acknowledge it within 30 days.
- We will look into it and reply without undue delay, with the outcome and the reasons.
You can also complain to the Information Commissioner’s Office (ICO):
- https://ico.org.uk/make-a-complaint/
- Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
- Helpline: 0303 123 1113
You may complain to the ICO without writing to us first. We still prefer the chance to put it right.
10. Cookies and local storage
The checker is designed to work without advertising cookies.
We may use local storage on your device so you can go back a step without retyping. That copy does not come to us. You can remove it by clearing data for maytally.co.uk in your browser settings.
Any non-essential cookie will be off until you opt in.
11. How we keep data safe
Income is safest when we never see it. That is the main control.
Where we do hold an email address, we limit staff access, we do not put live addresses in the public code repository, and we do not log request bodies that might contain a questionnaire. Mail and hosting should use TLS in transit.
If we become aware of a breach that risks your rights, we will follow the UK GDPR duty to assess it, to notify the ICO when the law requires, and to tell you when you need to act.
12. Changes
If we change this notice in a way that affects how we use data we already hold, we will update the date at the top and, for email subscribers, we will send a short note.
If a later product feature would need more than this notice allows — including any request for your income — we will ask you first and update this page before that feature goes live.