Privacy Policy

1. Introduction

1.1 We are committed to safeguarding the privacy of our website visitors and service users. This policy explains how we handle your personal data when we act as the data controller.

1.2 Our business is registered with the Information Commissioner’s Office (ICO) under registration number ZB138822. Our designated Data Protection Officer is Luke Whitehill.

1.3 Where we rely on your consent to process data, you have the right to withdraw that consent at any time by contacting us via the details in Section 8.

2. How we use your personal data

2.1 Usage Data: We process data about your use of our website to improve our services. This includes your IP address and browser type. Legal basis: Legitimate interests.

2.2 Enquiry Data: When you contact us, we process your name and email to respond to your request. Legal basis: Consent.

2.3 Client Data: To provide accountancy and payroll services, we process identity and financial information. Legal basis: Performance of a contract.

2.4 Regulatory Data: We are legally required to process data for Anti-Money Laundering (AML) checks and professional compliance. Legal basis: Legal obligation.

2.5 Refusal of Service: If you fail to provide personal data when requested, we may be unable to perform the contract we have with you or we may be prevented from complying with our legal obligations.

3. Data Security and Assessments

3.1 We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way. We limit access to your personal data to those employees and professional partners who have a business need to know.

3.2 We conduct regular Data Protection Impact Assessments (DPIA) where our processing is likely to result in a high risk to the rights and freedoms of individuals, particularly in relation to payroll and financial data.

4. Providing your personal data to others

4.1 Professional Software: To deliver our services, we use industry standard third party software including Dext, Streem Connect, BrightPay, GoCardless, Karbon, Xero, IRIS, FreeAgent and Hubdoc. These providers are bound by strict confidentiality and data protection agreements.

4.2 Financial Transactions: Payments are processed via Stripe, GoCardless or direct bank transfer. We share only the data required to process your payment.

4.3 Marketing: We use Squarespace to send updates. You can opt out at any time by clicking the unsubscribe link in any email we send.

4.4 International Transfers: Our website and certain software providers are hosted in the United States and Ireland. Where data is transferred to the US, we rely on the UK Extension to the EU-U.S. Data Privacy Framework (the "UK-US Data Bridge") or standard contractual clauses approved for use in the UK.

5. Retaining and deleting personal data

5.1 To comply with UK statutory accounting and legal obligations, we retain your personal data for a minimum period of 7 years following the end of our business relationship.

6. Your Rights

6.1 You have the right to access, rectify or erase your data, and the right to restrict or object to our processing. To exercise these rights, please contact Luke Whitehill.

6.2 You have the legal right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.

6.3 Automated Decision Making: We do not carry out any automated decision making or profiling that produces legal effects or similarly significantly affects you without human intervention.

7. Cookies

We use cookies to ensure our website functions correctly and to analyse traffic. You can manage your preferences through your browser settings or our on-site cookie banner.

8. Our Details

This website is owned and operated by Luke Whitehill trading as Excel Accountancy.

Company Registration: 12609830
Office: The Liverpool Film Studios, 105 Boundary Street, Liverpool, L5 9YJ
Email: luke@excelaccountancy.com
Telephone: 0151 662 0508