Privacy Policy

1. Introduction

AccTek Ltd (Company Number 16795951) is a company registered in England and Wales. Our registered office is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ.

AccTek Ltd is the data controller for the purposes of the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

If you have any questions regarding this policy or your personal data, you may contact:

Data Protection Lead
Email: info@acctek.co.uk 

We are registered with the Information Commissioner’s Office (ICO) under registration number: ZC096434

2. Scope

This policy explains:

• What personal data we collect
• Why we collect it
• Our lawful basis for processing
• How we store and protect it
• How long we retain it
• Your legal rights

We do not sell personal data to third parties.

3. Lawful basis for processing

We process personal data under one or more of the following lawful bases:

• Performance of a contract
• Compliance with legal obligations (including Money Laundering Regulations 2017, Proceeds of Crime Act 2002, Companies Act 2006, Taxes Management Act 1970)
• Legitimate interests (where not overridden by your rights)
• Consent (for marketing communications and non-essential cookies)

4. Categories of data we collect

Depending on the services you use, we may collect:

Identity Data
Full name, date of birth, nationality, place of birth, title, government identification documents.

Contact Data
Postal address, email address, telephone number.

Financial and Tax Data
National Insurance number, UTR, tax codes, bank details, payroll data, accounting records.

Company Data
Company name, registered office, share structure, directors, persons with significant control.

Compliance Data
AML verification data, sanctions screening results, electoral roll checks.

Technical Data
IP address, browser type, usage data, analytics data.

Marketing Preferences
Communication preferences and responses.

We collect data directly from you, from authorised third parties (e.g., HMRC, Companies House), and from compliance screening providers.

5. Why we use your data

We use your data to:

• Provide accounting, tax, payroll and advisory services
• Form and administer companies
• Verify identity and comply with anti-money laundering laws
• Communicate regarding your engagement
• Issue invoices and process payments
• Improve our services
• Maintain internal business records
• Send marketing communications (with consent)

We may conduct AML identity verification checks including electoral roll and credit reference “soft searches”. These do not affect your credit rating.

6. Sharing of data

We may share personal data with:

• HMRC, Companies House and other statutory authorities
• Professional advisers and subcontractors
• Cloud software providers (e.g., accounting platforms, CRM systems)
• AML and compliance verification providers
• IT hosting and infrastructure providers
• Payment processors

All third parties are contractually bound to maintain confidentiality and comply with data protection laws.

We may disclose information to the National Crime Agency (NCA) where required under the Proceeds of Crime Act 2002 or Terrorism Act 2000. We may be legally prohibited from informing you of such disclosure.

We do not sell your personal data.

7. International transfers

Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations
• International Data Transfer Agreements (IDTA)
• Standard Contractual Clauses

8. Data security

We implement appropriate technical and organisational measures including:

• Encrypted data transmission (SSL/TLS)
• Secure cloud hosting environments
• Role-based access controls
• Anti-malware and firewall protection
• Secure backup and disaster recovery systems

While we take reasonable steps to protect your data, transmission over the internet cannot be guaranteed to be completely secure.

9. Data retention

We retain personal data only as long as necessary.

For accounting and tax records, we generally retain records for six years plus the current year, in accordance with statutory limitation periods and regulatory requirements.

AML records are retained for five years after the end of the business relationship, in accordance with the Money Laundering Regulations 2017.

Data may be retained longer where required by law or to defend legal claims.

10. Marketing communications

You will receive service-related communications as part of your engagement.

We will only send marketing communications where:

• You have provided consent; or
• We rely on soft opt-in under PECR for existing clients.

You may unsubscribe at any time using the link in emails or by contacting info@acctek.co.uk.

12. Cookies

Our website uses cookies.

Strictly necessary cookies do not require consent.

Performance, analytics and marketing cookies are only placed after you provide consent via our cookie banner.

You can manage cookie preferences through your browser settings or via our website cookie tool.

13. Your rights

Under UK GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase data (where legally permissible)
• Restrict processing
• Object to processing (including marketing)
• Data portability (for automated data)
• Withdraw consent at any time

We will respond to requests within one month.

You have the right to lodge a complaint with the Information Commissioner’s Office at www.ico.org.uk

14. Automated decision making

We do not carry out automated decision-making that produces legal or similarly significant effects without human involvement.

15. Automated Processing and Profiling

We do not use automated decision-making that produces legal or significant effects without human involvement.

Where profiling is used for marketing or service improvement, you may object at any time.

16. Updates to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website. Continued use of our services constitutes acceptance of any changes.