Last updated: 7-22-2026
- Who we are
This policy explains how Adroit Accountax Ltd (“we”, “us”, “our”) collects and uses your personal data, and your rights in relation to it. We are the data controller for the personal data we hold.
- Registered company: Adroit Accountax Ltd, company number 06633409
- Registered office: Unit 8 Surrey Quays Road, London, SE16 2XU
- Data protection contact: info@adroitaccountax.com, 0207 680 9337
We are committed to protecting your privacy and handling your data in line with the UK GDPR and the Data Protection Act 2018.
- The information we collect
Depending on how you interact with us, we may collect:
- Identity and contact data — name, business name, email, phone, postal address.
- Enquiry and quote data — information you provide through our website forms, quote tool, or when you contact us (business type, turnover band, services of interest).
- Client data — where you become a client: financial records, tax information, National Insurance and UTR numbers, bank details, payroll data, and information about your business.
- Identity verification data — documents and information we must collect for anti-money-laundering (AML) and client due diligence purposes.
- Website and technical data — IP address, browser type, device information, and usage data collected via cookies (see our Cookie Policy).
We may also process special category data or information about criminal convictions where strictly necessary for specific engagements — for example, in the course of tax or compliance work — and only with an appropriate lawful basis and safeguards.
- How and why we use your data (lawful bases)
We process your data on the following bases:
- To respond to enquiries and provide quotes — on the basis of taking steps at your request prior to entering a contract, and our legitimate interests in responding to you.
- To provide our accountancy, tax and payroll services — on the basis of performance of our contract with you (the engagement).
- To meet legal and regulatory obligations — including AML checks, tax filing obligations, and requirements of our professional body — on the basis of compliance with a legal obligation.
- To manage and improve our business — administration, record-keeping, and improving our website and services — on the basis of our legitimate interests.
- For marketing — to send you relevant updates, only where you have consented or where permitted under our legitimate interests, with an easy opt-out every time.
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights.
- Who we share it with
We do not sell your data. We may share it with:
- Other firms within Adroit Accountax Group, where relevant to providing a joined-up service, under appropriate safeguards.
- HMRC, Companies House and other authorities, where required to deliver our services or meet legal obligations.
- Service providers who process data on our behalf (for example, cloud accounting software such as [Xero/QuickBooks], IT and hosting providers, secure document tools) — all bound by contract to protect your data and act only on our instructions.
- Professional advisers, regulators and auditors where necessary.
- Successors in the event of a business reorganisation or transfer.
- International transfers
Where any provider processes data outside the UK, we ensure appropriate safeguards are in place — such as an adequacy decision or the ICO’s International Data Transfer Agreement / Addendum. [Confirm which apply to your providers.]
- How long we keep it
We keep personal data only as long as necessary:
- Client records and working papers — generally [6–7] years after the end of the engagement, in line with tax and professional requirements.
- AML / due diligence records — 5 years after the end of the business relationship, as required by law.
- Enquiries that don’t become clients — [period, e.g. 12–24 months].
- Marketing data — until you opt out or it is no longer relevant.
- Your rights
Under data protection law you have the right to: access your data; have inaccurate data corrected; request erasure; restrict or object to processing; data portability; and to withdraw consent at any time where we rely on it. Where processing is necessary for a legal or regulatory obligation, some rights may be limited.
To exercise any right, contact us at info@adroitaccountax.com. We will respond within one month.
- Complaints
If you have a concern about how we handle your data, please contact us first at info@adroitaccountax.com so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk, or 0303 123 1113.
- Cookies
Our website uses cookies. Please see our Cookie Policy for details of the cookies we use and how to manage them.
- Changes to this policy
We may update this policy from time to time. The current version is always available on this page, with the “last updated” date shown above.
