Privacy, handled with the same precision as your accounts
At Aczone Consultants, the personal and financial information you trust us with is treated with the same care and confidentiality we bring to every return, payroll run, and set of accounts. This notice explains what we collect, why, and the control you always keep over it.
The short version
If you only read one section, make it this one. The full detail follows below.
What we collect
Identity details, financial and tax records, correspondence, and basic website data — only what's genuinely needed to do your accounts properly.
Why we use it
To deliver the services you've engaged us for, meet our legal and HMRC obligations, and — only with consent — keep you posted on anything relevant.
Your rights
You can ask to see, correct, restrict, or delete your data at any time, and withdraw marketing consent whenever you choose.
How it's protected
Encrypted storage, access limited to staff who need it, and providers contractually held to the same standard we hold ourselves to.
The people responsible for your data
Aczone Consultants ("we", "us", "our") is the data controller for the personal information described in this notice. That means we decide how and why your information is collected and used, and we're accountable for doing that properly.
This notice applies to anyone whose data we hold: clients, prospective clients, employees of clients, and visitors to this website. It sits alongside, and doesn't replace, anything specific we agree with you in an engagement letter.
Registered & Trading Address
131 South End, Croydon, CR0 1BJ, United KingdomPhone
+44 7983 132304Five kinds of information
We only collect what we need to provide our services and meet our legal obligations.
Identity & Contact Details
Name, date of birth, home or business address, phone number, and email address.
Financial & Tax Information
National Insurance number, Unique Taxpayer Reference, bank details, salary, pension, and VAT or company registration details.
Engagement Records
Correspondence, call notes, meeting notes, and details of the services you've asked us to provide.
Website & Technical Data
IP address, browser and device type, pages visited, and cookie identifiers when you use this website.
Information From Other Sources
Details we receive from HMRC, Companies House, your employer, or another party, where relevant to our work for you.
Four reasons we ever process your data
Every use of your personal data has to fit one of these legal grounds — there's no fifth option.
To deliver our services
Preparing accounts, tax returns, payroll, VAT, and statutory filings under the terms of our engagement with you.
To meet legal obligations
Anti-money-laundering checks, HMRC reporting, and the record-keeping required by law and our professional body.
For our legitimate interests
Improving our services and preventing fraud — always weighed against your right to privacy before we proceed.
With your consent
Newsletters, event invitations, or marketing you've opted into. You can withdraw this whenever you like.
Limited, necessary sharing only
We don't sell personal data. We only share it where it's necessary to deliver our services or where the law requires it.
HMRC & Companies House
For statutory tax returns and company filings made on your behalf.
Pension Providers
To administer workplace pension auto-enrolment where we run your payroll.
Practice & Cloud Software Providers
Secure document storage and accounting software, each bound by a data processing agreement.
Professional Advisers & Regulators
Our insurers, auditors, or professional body, only where required for compliance or in the event of a claim.
A Future Buyer of the Business
Only in the event of a sale or restructure, and only under the same protections described in this notice.
Protected at every layer
Encryption in transit and at rest
Data is encrypted as it moves between systems and while it's stored.
Access limited to people who need it
Only the team members working on your file can see your records.
Providers held to our standard
Every supplier we use is contractually bound to the same level of protection we apply ourselves.
A plan if something goes wrong
If we ever suspect a breach, we investigate, contain it, and notify you and the ICO without undue delay where the law requires it.
Four stages, then it's gone
We don't keep data longer than we have a genuine reason to.
Collected
When you engage us, or simply get in touch, we begin holding what's needed for that purpose.
Actively Used
While you're a client, your file stays open and accessible to your engagement team only.
Retained
After our work together ends, financial and tax records are normally kept for a minimum of six years, in line with HMRC requirements.
Securely Deleted
Once no legal or business reason remains to keep it, your data is permanently and securely deleted.
You stay in control
UK GDPR gives you a set of rights over your own data. Here's what each one means in practice.
Exercise any of these
Email or call us and we'll act on it. We don't charge a fee unless a request is clearly unfounded or excessive, and we may ask you to verify your identity first.
Email info@aczone.co.ukRight to be informed
Right of access
Right to rectification
Right to erasure
Right to restrict processing
Right to data portability
Right to object
Right to withdraw consent
Cookies on this website
This website uses a small number of cookies to remember your preferences and understand how the site is used, so we can keep improving it.
You can control or delete cookies through your browser settings at any time — doing so won't stop you from using the rest of the site.
Changes to this notice
We'll update this page whenever our practices change, and the date below will reflect that.
For anything material, we'll also do our best to let existing clients know directly.
Talk to us about your data
Whether it's exercising a right, asking how something works, or raising a concern — we're glad to talk it through directly.
Not satisfied with our response?
You can complain to the Information Commissioner's Office (ICO), the UK's data protection regulator — Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or at ico.org.uk.
