This notice describes how I collect and use personal data about you, in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.
Tony Sykes Limited registered in England and Wales No.13106974 is an accountancy and tax advisory practice. Tony Sykes BA FCA Chartered Accountant is a sole practitioner and my registered office address is 27 Old Gloucester Street, London WC1N 3AX.
I am registered on the Information Commissioner's Office Register of Data Controllers under registration number A1105898. I am the ‘data controller’ responsible for deciding how I hold and use personal data about you.
Enquiries in relation to this privacy notice or my treatment of your personal data should be sent by email to email@example.com.
Information that I collect
Most of the personal information I process is provided to me directly by my clients, from HMRC, from publicly available sources such as Companies House and from previous accountants:
Personal details: Including name, address, and date of birth, telephone numbers, email addresses, marital status, bank account details, photo ID and proof of address.
Accounting records: including bank statements, invoices and other records.
Payroll records: Including PAYE references, salary details, tax code notices and pension details.
Tax information: Including National insurance numbers, unique tax references, VAT numbers and government gateway credentials.
Corporate entities: Companies House records and web-filing authentication codes.
How I use your personal data
I take your privacy very seriously and will never share or disclose any of your personal information without your consent, other than for the purposes specified in this notice or where there is a legal requirement.
I only retain your data for as long as is necessary and for the purposes specified in this notice. I do not undertake general direct marketing to my clients.
The purposes and reasons for processing your personal data are to fulfil my responsibilities to you as per the terms of my Letter of Engagement. Your personal data is crucial for me to be able to carry out the services you instruct me to on your behalf.
I use third parties to enable me to provide my services to you in accordance with our terms of engagement. Such third parties include cloud service providers for accounting and tax software, administration support and email.
I take steps to ensure that all third parties have privacy policies and controls which comply with GDPR.
Your personal data may be transferred to appropriate third parties including HMRC, Companies House, payroll, pension and cloud based service providers.
Your data protection rights
Under data protection law, you have rights including:
Your right of access - You have the right to ask me for copies of your personal information.
Your right to rectification - You have the right to ask me to rectify information you think is inaccurate. You also have the right to ask me to complete information you think is incomplete.
Your right to erasure - You have the right to ask me to erase your personal information in certain circumstances.
Your right to restriction of processing - You have the right to ask me to restrict the processing of your information in certain circumstances.
Your right to object to processing - You have the the right to object to the processing of your personal data in certain circumstances.
Your right to data portability - You have the right to ask that I transfer the information you gave me to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, I have one month to respond to you.
Please contact me at firstname.lastname@example.org if you wish to make a request.
I have put in place commercially reasonable and appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.
How long I keep your data
I will typically hold your personal information for 7 years in line with regulatory data retention requirements. Data may be retained longer than 7 years if required for legal purposes or where explicitly requested by you.
I do not collect or process any personal data from the website. I do not monitor IP addresses from your computer, nor do I perform any form of analysis on visits. The website does include some cookies for the basic operation of the site.
Where do I store client data?
I use cloud based storage located within the European Union (EU) and outside of the EU. I take steps to ensure that appropriate measures and controls are in place to protect any data that is transferred outside of the EU in accordance with applicable data protection laws and regulations.
How to complain
You can complain to the ICO if you are unhappy with how I have used your data. The ICO’s address:
Information Commissioner’s Office
Helpline number: 0303 123 1113
Website - https://ico.org.uk/concerns
Changes to this policy
Any changes I may make to this privacy notice in the future will be updated on my website at: www.tonysykesbafca.co.uk
This privacy notice was last updated on 16 July 2021.