Privacy Policy

This Privacy Policy applies between you, the user of our services or website, and Brian Gumbley Accountancy Services Ltd, the data controller. We are committed to protecting and respecting your privacy, and we handle all personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018

1.

This privacy policy applies to our use of any and all Data collected by us or provided by you in relation to your use of our services. 

Please read this privacy policy carefully to understand how we collect, use, and protect your information

In this privacy policy, the following definitions are used :

Data

“Data”: Any information that identifies an individual directly or indirectly, including but not limited to names, contact details, identification numbers, financial data, and IP addresses.

We / Us / Our Brian Gumbley Accountancy Services Ltd

A company incorporated in England & Wales with registered number 09843320 whose registered office is at Corner House, 28 Huddersfield Road, Newhey, Rochdale, Lancashire OL16 3QF;

User / you

Any third party that accesses our Website or services and is not either (i) employed by Brian Gumbley Accountancy Services Ltd and acting in the course of their employment or (ii) engaged as a consultant or providing services to Brian Gumbley Accountancy Services Ltd and accessing our Website and services in connection with the provision of such services.

2.

In this privacy policy, unless the context requires a different interpretation:

a. the singular includes the plural and vice versa;

b. reference to sub-clauses, clause, schedules or appendices are to sub-clauses, clauses, schedules or apprentices of this privacy policy;

c.  a reference to a person includes firms, companies, government entities, trusts and partnerships;

d. “including” is understood to mean “including without limitation”;

e.  reference to any statutory provision includes any modification or amendment of it;

f.  the headings and sub-headings do not form part of this privacy policy.

3.

Scope of this privacy policy

This policy covers:

  • How we collect, store, use and disclose personal data.

  • How we protect your data using cyber security best practices.

  • Your legal rights under UK data protection law.

It does not cover external websites linked to from our own site.

4.

Data collected

We may collect and process the following categories of data:

a. Identity and Contact Information

  • Full name, address, email, phone number, date of birth

  • Passport/driving licence details (for Anti-Money Laundering checks)

  • National Insurance number, UTR, and company registration numbers

b. Financial and Business Data

  • Business turnover, profit/loss, VAT and payroll records

  • Bank account and transaction information

  • Subcontractor and employee payroll data

  • Pension, HP, insurance, and tax details

c. Technical and Website Data

  • IP address and browser data (automatically collected)

  • Login credentials (where applicable and securely stored)

d. Professional Details

  • Job title, role, employment history

  • References and tax codes

5.

How We Use Your Data

We process your data for the following purposes:

  • To deliver our accounting, payroll, tax, and advisory services

  • To meet legal, tax and regulatory obligations

  • To maintain accurate internal records

  • For AML (Anti-Money Laundering) compliance

  • To manage our relationship with you

  • For business performance analysis (anonymised, where applicable)

We will only use your data where we have a lawful basis to do so—this may include consent, contract, legal obligation, or legitimate interest.

6.

Data Retention

We retain your data for a minimum of six years following the end of the relevant tax year or engagement, in line with HMRC and regulatory requirements. Some information may be retained longer for legal, regulatory, or operational reasons.

7.

Sharing Your Data

We do not sell your personal data.

We may share your data with:

  • HMRC and regulatory bodies (as required)

  • Payroll or accounting software providers (under data protection agreements)

  • Subcontractors or consultants working on your behalf

  • Prospective buyers in the case of a business sale or restructure

Any third party with whom data is shared is required to comply with strict confidentiality and data protection obligations.

8.

Cyber Security

We apply appropriate security measures to protect your data, including:

  • Encryption of stored and transmitted data

  • Two-factor authentication on cloud systems

  • Secure password storage practices

  • Staff training on cyber awareness and phishing risks

  • Regular software updates and security audits

  • Secure file transfers and restricted internal access

Despite best efforts, data transmission over the internet is not completely secure. You transmit data at your own risk.

9.

Your Rights

You have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate data

  • Request deletion of your data (subject to legal limitations)

  • Restrict or object to data processing

  • Request data portability to another provider

  • Withdraw consent (where consent was the legal basis)

To exercise any of these rights, please contact us at bgumbley@sky.com.

There is no charge for such requests unless they are excessive or repetitive. We will respond within one calendar month.

10.

Marketing

We may occasionally send you service updates or information relevant to your engagement with us. You may opt out at any time. We do not share your data with third parties for their marketing purposes.

11.

Business Changes

If our business undergoes a sale, merger, or reorganisation, your personal data may be transferred to the new entity or owner. You will be notified of any such change.

12.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website and, where appropriate, notified to you by email. Continued use of our services after changes indicates acceptance of the revised terms.

Contact Us

If you have any questions or concerns about this Privacy Policy, your data, or wish to make a request, please contact:

Brian Gumbley
📧 @ bgumbley@sky.com 
📍 Corner House, 28 Huddersfield Road, Newhey, Rochdale, Lancashire OL16 3QF

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.