Central London Accountants is committed to protecting your personal data and respecting your privacy at all times. As an ICAEW-regulated firm of Chartered Accountants based in Central London, we recognise the importance of confidentiality, data security, and transparency when handling personal and financial information.
This Privacy Policy explains in detail how we collect, use, store, share, and protect personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and our professional and regulatory obligations as UK accountants.
This policy applies to all personal data collected through our website, initial enquiries, client onboarding processes, professional correspondence, and throughout the delivery of accounting, tax, and advisory services to individuals and businesses across London and the wider UK.
By accessing our website, submitting an enquiry, or engaging Central London Accountants for professional services, you acknowledge that you have read and understood this Privacy Policy and agree to the data handling practices described within it.
Central London Accountants is an ICAEW-regulated firm of Chartered Accountants operating from Central London, United Kingdom. We provide a wide range of professional accounting, tax, and advisory services to individuals and businesses, including SMEs, startups, limited companies, sole traders, contractors, landlords, and company directors.
For the purposes of UK data protection legislation, Central London Accountants acts as a data controller. This means we are responsible for deciding how and why your personal data is processed and for ensuring that it is handled lawfully and securely.
We take our data protection responsibilities seriously and embed data protection principles into our day-to-day operations. Personal data is handled lawfully, fairly, and transparently, and only for specific and legitimate purposes.
We are committed to ensuring that personal information is:
Our approach to data protection is aligned with:
The personal data we collect varies depending on how you interact with us and the nature of the services we provide. We aim to collect only the minimum amount of information required to deliver our services professionally and compliantly.
This may include your full name, business name, registered address, correspondence address, email address, telephone number, and other contact details provided when you make an enquiry or engage our services.
To deliver accounting and tax services, we may collect and process detailed financial information. This can include income records, expense data, bank statements, tax references, National Insurance numbers, Unique Taxpayer References, VAT registration numbers, payroll data, pension information, and other financial documentation relevant to your affairs.
For business clients, we may collect company registration details, director and shareholder information, business ownership structures, payroll records, employee data, and documents required for statutory accounts, payroll processing, and regulatory filings.
When you visit our website, we may automatically collect limited technical information such as IP address, browser type, operating system, device information, and website usage behaviour. This information helps us maintain website security, monitor performance, and improve user experience.
We retain records of professional communications, including emails, letters, telephone notes, and other correspondence. These records help ensure continuity of service, accurate advice, regulatory compliance, and proper record keeping.
Personal data may be collected through a variety of channels, including:
UK GDPR requires that we identify a lawful basis for processing personal data. Depending on the circumstances, we may rely on one or more of the following lawful bases.
Processing is necessary to perform a contract with you or to take steps at your request prior to entering into a contract. This includes preparing accounts, submitting tax returns, and providing agreed advisory services.
We are required to process personal data to comply with legal and regulatory obligations, including tax legislation, HMRC reporting requirements, anti-money laundering regulations, and professional standards imposed by ICAEW.
We may process personal data where it is necessary for our legitimate interests as a professional accountancy firm, provided that those interests do not override your rights and freedoms. This may include managing our business operations, maintaining records, and ensuring service quality.
In limited circumstances, we may rely on your consent to process personal data. Where consent is used, you have the right to withdraw it at any time.
Personal data is used strictly for legitimate, professional, and regulatory purposes, including:
As ICAEW-regulated Chartered Accountants, we are subject to strict confidentiality obligations. All personal, financial, and business information is treated as confidential and handled with the utmost care.
Information will not be disclosed to third parties without appropriate authority unless disclosure is required or permitted by law, regulation, or professional duty. This includes circumstances where we are legally required to report information to HMRC or other authorities.
We do not sell, rent, or trade personal data. Personal information is shared only where necessary to deliver services or meet legal obligations.
We may share personal data with trusted third-party service providers who support our operations. This can include IT providers, secure cloud accounting platforms, document storage services, payroll software providers, and professional advisers. All third parties are required to comply with data protection and confidentiality standards.
We may disclose personal data to HMRC, Companies House, regulatory bodies, or law enforcement agencies where required by law or in accordance with our professional obligations.
In certain circumstances, personal data may be shared with legal advisers, auditors, or professional indemnity insurers, for example, in connection with compliance reviews, claims, or dispute resolution.
We primarily process and store personal data within the United Kingdom. Where it is necessary to transfer personal data outside the UK, appropriate safeguards are implemented to ensure compliance with UK GDPR requirements.
We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure.
These measures include controlled access to systems, secure storage, encryption where appropriate, staff training on data protection responsibilities, and regular reviews of our security arrangements.
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and to meet legal, regulatory, and professional obligations.
Retention periods vary depending on the type of data involved. Accounting and tax records are typically retained in line with HMRC requirements and professional guidance, after which data is securely deleted or destroyed.
Under UK GDPR, individuals have a number of rights in relation to their personal data. These include:
Requests to exercise your rights should be made in writing. We may need to verify your identity before responding, and we will respond within the timeframes required by law.
Our website uses cookies to support functionality, analyse website traffic, and enhance user experience. Cookies may collect technical information, but do not identify individuals unless personal data is voluntarily submitted.
You can control or disable cookies through your browser settings. Please note that restricting cookies may affect website functionality.
We do not send unsolicited marketing communications. Where marketing messages are sent, they will be relevant, lawful, and provide clear options to opt out of future communications at any time.
If you have any concerns about how your personal data is handled, we encourage you to contact Central London Accountants in the first instance. We take all data protection concerns seriously and aim to resolve issues promptly and fairly.
You also have the right to lodge a complaint with the Information Commissioner’s Office if you believe your data protection rights have been breached.
This Privacy Policy may be updated from time to time to reflect changes in law, regulation, professional guidance, or our internal practices. The latest version will always be published on our website.
If you have any questions about this Privacy Policy or our data protection practices, please contact Central London Accountants using the contact details provided on our website.