Privacy Policy

Central London Accountants is committed to protecting your personal data and respecting your privacy at all times. As an ICAEW-regulated firm of Chartered Accountants based in Central London, we recognise the importance of confidentiality, data security, and transparency when handling personal and financial information.

This Privacy Policy explains in detail how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and our professional and regulatory obligations as UK accountants.

This policy applies to all personal data collected through our website, initial enquiries, client onboarding processes, professional correspondence, and throughout the delivery of accounting, tax, and advisory services to individuals and businesses across London and the wider UK.

By accessing our website, submitting an enquiry, or engaging Central London Accountants for professional services, you acknowledge that you have read and understood this Privacy Policy and agree to the data handling practices described within it.

About Central London Accountants

Central London Accountants is an ICAEW-regulated firm of Chartered Accountants operating from Central London, United Kingdom. We provide a wide range of professional accounting, tax, and advisory services to individuals and businesses, including SMEs, startups, limited companies, sole traders, contractors, landlords, and company directors.

For the purposes of UK data protection legislation, Central London Accountants acts as a data controller. This means we are responsible for deciding how and why your personal data is processed and for ensuring that it is handled lawfully and securely.

Our Commitment to Data Protection

We take our data protection responsibilities seriously and embed data protection principles into our day-to-day operations. Personal data is handled lawfully, fairly, and transparently, and only for specific and legitimate purposes.

We are committed to ensuring that personal information is:

  • Collected only where necessary and relevant.
  • Used in a way that is fair and lawful.
  • Kept accurate and up to date.
  • Stored securely and protected against unauthorised access.
  • Retained only for as long as necessary.

Our approach to data protection is aligned with:

  • UK General Data Protection Regulation (UK GDPR)
  • Data Protection Act 2018
  • ICAEW Code of Ethics and Professional Conduct
  • HMRC compliance and reporting requirements
  • Companies House statutory obligations

What Personal Data We Collect

The personal data we collect varies depending on how you interact with us and the nature of the services we provide. We aim to collect only the minimum amount of information required to deliver our services professionally and compliantly.

Identity and Contact Information

This may include your full name, business name, registered address, correspondence address, email address, telephone number, and other contact details provided when you make an enquiry or engage our services.

Financial and Tax Information

To deliver accounting and tax services, we may collect and process detailed financial information. This can include income records, expense data, bank statements, tax references, National Insurance numbers, Unique Taxpayer References, VAT registration numbers, payroll data, pension information, and other financial documentation relevant to your affairs.

Business and Employment Information

For business clients, we may collect company registration details, director and shareholder information, business ownership structures, payroll records, employee data, and documents required for statutory accounts, payroll processing, and regulatory filings.

Technical and Website Usage Data

When you visit our website, we may automatically collect limited technical information such as IP address, browser type, operating system, device information, and website usage behaviour. This information helps us maintain website security, monitor performance, and improve user experience.

Communications and Correspondence

We retain records of professional communications, including emails, letters, telephone notes, and other correspondence. These records help ensure continuity of service, accurate advice, regulatory compliance, and proper record keeping.

How We Collect Personal Data

Personal data may be collected through a variety of channels, including:

  • Direct enquiries are submitted via our website contact forms.
  • Email or telephone communications.
  • Client onboarding and identity verification processes.
  • Documents and information provided during service delivery.
  • Communications with HMRC, Companies House, or other authorities acting on your behalf.
  • Cookies and website analytics tools.

Lawful Bases for Processing Personal Data

UK GDPR requires that we identify a lawful basis for processing personal data. Depending on the circumstances, we may rely on one or more of the following lawful bases.

Contractual Necessity

Processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract. This includes preparing accounts, submitting tax returns, and providing agreed advisory services.

Legal Obligation

We are required to process personal data to comply with legal and regulatory obligations, including tax legislation, HMRC reporting requirements, anti-money laundering regulations, and professional standards imposed by ICAEW.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests as a professional accountancy firm, provided that those interests do not override your rights and freedoms. This may include managing our business operations, maintaining records, and ensuring service quality.

Consent

In limited circumstances, we may rely on your consent to process personal data. Where consent is used, you have the right to withdraw it at any time.

How We Use Your Personal Data

Personal data is used strictly for legitimate, professional, and regulatory purposes, including:

  • Delivering accounting, tax, and advisory services.
  • Managing client relationships and ongoing communications.
  • Preparing and submitting tax returns and statutory filings.
  • Liaising with HMRC and Companies House on your behalf.
  • Meeting legal, regulatory, and professional obligations.
  • Improving our services, systems, and internal processes.
  • Preventing fraud, financial crime, and unauthorised activity.

Confidentiality and Professional Duty

As ICAEW-regulated Chartered Accountants, we are subject to strict confidentiality obligations. All personal, financial, and business information is treated as confidential and handled with the utmost care.

Information will not be disclosed to third parties without appropriate authority unless disclosure is required or permitted by law, regulation, or professional duty. This includes circumstances where we are legally required to report information to HMRC or other authorities.

Sharing and Disclosure of Personal Data

We do not sell, rent, or trade personal data. Personal information is shared only where necessary to deliver services or meet legal obligations.

Third Party Service Providers

We may share personal data with trusted third-party service providers who support our operations. This can include IT providers, secure cloud accounting platforms, document storage services, payroll software providers, and professional advisers. All third parties are required to comply with data protection and confidentiality standards.

Regulatory and Legal Authorities

We may disclose personal data to HMRC, Companies House, regulatory bodies, or law enforcement agencies where required by law or in accordance with our professional obligations.

Professional Advisers and Insurers

In certain circumstances, personal data may be shared with legal advisers, auditors, or professional indemnity insurers, for example, in connection with compliance reviews, claims, or dispute resolution.

International Data Transfers

We primarily process and store personal data within the United Kingdom. Where it is necessary to transfer personal data outside the UK, appropriate safeguards are implemented to ensure compliance with UK GDPR requirements.

Data Security Measures

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure.

These measures include controlled access to systems, secure storage, encryption where appropriate, staff training on data protection responsibilities, and regular reviews of our security arrangements.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and to meet legal, regulatory, and professional obligations.

Retention periods vary depending on the type of data involved. Accounting and tax records are typically retained in line with HMRC requirements and professional guidance, after which data is securely deleted or destroyed.

Your Data Protection Rights

Under UK GDPR, individuals have a number of rights in relation to their personal data. These include:

  • The right to access personal data held about you.
  • The right to request correction of inaccurate or incomplete data.
  • The right to request erasure in certain circumstances.
  • The right to restrict processing where applicable.
  • The right to data portability.
  • The right to object to certain types of processing.
  • The right to withdraw consent where processing is based on consent.

Requests to exercise your rights should be made in writing. We may need to verify your identity before responding, and we will respond within the timeframes required by law.

Cookies and Website Tracking

Our website uses cookies to support functionality, analyse website traffic, and enhance user experience. Cookies may collect technical information, but do not identify individuals unless personal data is voluntarily submitted.

You can control or disable cookies through your browser settings. Please note that restricting cookies may affect website functionality.

Marketing Communications

We do not send unsolicited marketing communications. Where marketing messages are sent, they will be relevant, lawful, and provide clear options to opt out of future communications at any time.

Complaints and Concerns

If you have any concerns about how your personal data is handled, we encourage you to contact Central London Accountants in the first instance. We take all data protection concerns seriously and aim to resolve issues promptly and fairly.

You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe your data protection rights have been breached.

Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in law, regulation, professional guidance, or our internal practices. The latest version will always be published on our website.

Contact Information

If you have any questions about this Privacy Policy or our data protection practices, please contact Central London Accountants using the contact details provided on our website.