Privacy Notice
AccTax Accountancy processes personal data and is a data controller under the GDPR.
ZB785750 is our registration number with the Independent Commissioner's Office
(https://ico.org.uk). We give a schedule outlining the necessary information as part of the
agreement when we work as a data processor on behalf of a data controller (for instance,
when processing payroll).
Time to time, we may amend this privacy notice.
The Purposes
We intend to process personal data for the following purposes:
- To enable us to provide professional services to you as our client.
- To perform our responsibilities under applicable laws that are periodically in effect, such as the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 ("MLR 2017").
- To fulfil the professional responsibilities that come with being an AAT member.
- To use in the investigation and/or defence of potential complaints, disciplinary and legal proceedings.
- To provide us the ability to invoice you for our services and investigate or resolve any disputes with attendant fees that may have come up.
- If you have given us permission to do so, we may get in touch with you regarding additional services we offer that could be of interest to you.
The Legal Bases
The following legal bases support our intended handling of personal data:
- When you instructed us to proceed, you provided consent for us to process your personal data for the purposes listed above.
- The processing is necessary for the performance of our contract with you.
- The processing is necessary for compliance with legal obligations to which we are subject (e.g. MLR 2017).
- The processing is necessary for the purposes of the legitimate interests which we pursue.
When we request personal data or any other related information, it is your responsibility to
provide us with it as part of our contract with you. We might not be able to offer you
professional services if you fail to supply the information we ask for. In this situation, we will
either be unable to act or will have to stop working with you.
Sharing of Personal Data
We may share your personal data with:
- HMRC
- Any third parties with whom you require or permit us to correspond
- Subcontractors
- An alternate appointed by us in the event of incapacity or death
- Tax insurance providers
- Professional indemnity insurers
- Our professional body AAT and/or the office of professional body anti-money laundering supervisors (OPBAS) in relation to practice assurance and/or the requirements of MLR 2017 (or any similar legislation)
If the law allows or requires us to do so, we may also share your personal data with:
- The police and law enforcement agencies
- Courts and tribunals
- The information commissioner's office ("ICO")
Retention of Personal Data
As a data controller, in line with the best practices recognized in the tax and accountancy
sector, we will retain all records pertaining to you as follows:
- Our policy dictates that when preparing tax returns, we retain the relevant information for six years following the conclusion of the tax year in question.
- In cases where there is an ongoing client relationship, data required for tax compliance beyond one year (such as capital gains base costs, and claims and elections submitted to HMRC) will be retained for the duration of the relationship. However, it will be deleted five years after the termination of the business relationship unless you, as our client, request a longer retention period.
You are responsible for retaining information that we send to you.
Data Access Request
You have a right to request access to your personal data that we hold. Please request in
writing for the attention of Hafez Ahamed. To help us provide the information you want and
deal with your request more quickly, you should include enough details to enable us to verify
your identity and find the relevant information. DPA 2018 requires that we comply with a
SAR promptly and in any event within one month of receiving request.
Right of Rectification
You are entitled to have any inaccurate personal data about you that we possess corrected. If
you discover that any personal data we hold regarding you is inaccurate or incomplete, please
notify us as soon as possible so that we can make the necessary amendments.
Deleting Your Records
Under specific circumstances, you have the right to request the erasure of your personal data
that we possess. Additional details can be found on the ICO website (www.ico.org.uk).
Should you wish to have your personal data erased, notify us promptly, and we will evaluate
your request. However, we reserve the right to deny an erasure request under certain
circumstances.
Right to Restrict Processing
You have the right to 'block' or suppress the processing of your personal data, or to object to
its processing in certain circumstances. Additional information can be found on the ICO
website (www.ico.org.uk). If you wish for us to stop processing your information or if you
object to the processing, please notify us immediately so we can determine the appropriate
course of action, if necessary.
Data Portability
You are entitled to receive your personal data that we possess in a machine-readable format in
certain circumstances, enabling straightforward transfer to a new professional adviser.
Additional details can be found on the ICO website.
Data portability rights apply only:
- to personal data an individual has provided to a controller.
- where the processing is based on the individual's consent or for the performance of a contract; and
- when processing is carried out by automated means
Withdrawal of consent
If you have given your consent to our processing of your personal data, you are entitled to
withdraw this consent at any time. Should you decide to withdraw your consent, please notify
us without delay.
Please note:
- the withdrawal of consent does not affect the lawfulness of earlier processing
- if you withdraw your consent, we may not be able to continue to provide services to you.
- even if you withdraw your consent, it may remain lawful for us to process your data on another legal basis (e.g. because we have a legal obligation to continue to process your data)
Our Responsibilities and legal obligations
We assume full responsibility and legal obligations for processing your data in compliance
with the General Data Protection Regulation (GDPR). For more information, please visit the
Independent Commissioner's Office (ICO) website.
Complaints Procedure
Should you be dissatisfied with our response or believe that we have not adhered to GDPR or
DPA 2018 regulations, you are welcome to file a complaint with us. Direct any complaint to
Hafez Ahamed at AccTax Accountancy. Additionally, if our response does not resolve your
concerns, you are entitled to submit a complaint to the ICO (www.ico.org.uk).
We, AccTax Accountancy, want to keep long lasting positive impact on the services we
provide to our clients.