Legal

Privacy Policy

Last updated:

Source247 Accounting is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services or visit our website.

1. Who We Are

Source247 Accounting is the data controller for the personal data we process. We are based at 2 Tresco Close, Bolton, BB2 4RT, United Kingdom.

If you have any questions about how we handle your personal data, please contact us at [email protected].

2. What Data We Collect

We collect and process the following categories of personal data:

Identity and contact data: your name, address, email address, telephone number, and date of birth.

Financial data: bank account details, income and expenditure records, tax reference numbers (UTR, VAT registration number, PAYE reference), and other financial information necessary to provide our services.

Technical data: IP address, browser type, and usage data when you visit our website.

Communications data: records of correspondence between us, including emails and enquiry form submissions.

3. How We Collect Your Data

We collect data directly from you when you engage our services, complete our contact form, correspond with us by email or telephone, or provide us with documents and records.

We may also receive data from HMRC, Companies House, or other third parties in the course of providing our services.

4. How We Use Your Data

We use your personal data to provide accounting, bookkeeping, payroll, VAT, and tax services as set out in your engagement letter.

We also use your data to comply with our legal and regulatory obligations, including anti-money laundering requirements; to manage our relationship with you, including billing and communications; and to improve our services.

We will only use your data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another reason compatible with the original purpose.

5. Legal Basis for Processing

We process your personal data on the following legal bases: performance of a contract (to provide the services you have engaged us for); compliance with a legal obligation (such as anti-money laundering, tax, and accounting regulations); and our legitimate interests (such as managing our business and improving our services).

Where we rely on legitimate interests, we have balanced these against your rights and interests and are satisfied that our processing is proportionate and does not override your rights.

6. Data Sharing

We do not sell your personal data to third parties. We may share your data with HMRC, Companies House, and other regulatory bodies as required by law; with professional advisers such as solicitors or financial advisers where necessary; and with our software providers (such as Xero or QuickBooks) who process data on our behalf under strict data processing agreements.

All third parties are required to process your data securely and only for the purposes we specify.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and to comply with our legal obligations. In general, we retain accounting and tax records for a minimum of six years following the end of the relevant tax year, in accordance with HMRC requirements.

After the retention period, your data will be securely deleted or anonymised.

8. Your Rights

Under UK GDPR, you have the right to access the personal data we hold about you; request correction of inaccurate data; request erasure of your data (subject to our legal obligations to retain it); object to or restrict our processing of your data; and request that we transfer your data to another provider.

To exercise any of these rights, please contact us at [email protected]. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have not handled your data correctly.

9. Data Security

We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction, including secure encrypted storage, access controls, and regular security reviews.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by law.

10. Cookies

Our website uses essential cookies necessary for the site to function. We do not use tracking or advertising cookies without your consent. You can control cookie settings through your browser preferences.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on our website with a revised 'last updated' date. We encourage you to review this policy periodically.