At A Glance

The short version

If you only read one section, make it this one. The full detail follows below.

What we collect

Identity details, financial and tax records, correspondence, and basic website data — only what's genuinely needed to do your accounts properly.

Why we use it

To deliver the services you've engaged us for, meet our legal and HMRC obligations, and — only with consent — keep you posted on anything relevant.

Your rights

You can ask to see, correct, restrict, or delete your data at any time, and withdraw marketing consent whenever you choose.

How it's protected

Encrypted storage, access limited to staff who need it, and providers contractually held to the same standard we hold ourselves to.

Who We Are

The people responsible for your data

Aczone Consultants ("we", "us", "our") is the data controller for the personal information described in this notice. That means we decide how and why your information is collected and used, and we're accountable for doing that properly.

This notice applies to anyone whose data we hold: clients, prospective clients, employees of clients, and visitors to this website. It sits alongside, and doesn't replace, anything specific we agree with you in an engagement letter.

Registered & Trading Address
131 South End, Croydon, CR0 1BJ, United Kingdom
What We Collect

Five kinds of information

We only collect what we need to provide our services and meet our legal obligations.

Identity & Contact Details

Name, date of birth, home or business address, phone number, and email address.

Financial & Tax Information

National Insurance number, Unique Taxpayer Reference, bank details, salary, pension, and VAT or company registration details.

Engagement Records

Correspondence, call notes, meeting notes, and details of the services you've asked us to provide.

Website & Technical Data

IP address, browser and device type, pages visited, and cookie identifiers when you use this website.

Information From Other Sources

Details we receive from HMRC, Companies House, your employer, or another party, where relevant to our work for you.

How We Use It

Four reasons we ever process your data

Every use of your personal data has to fit one of these legal grounds — there's no fifth option.

To deliver our services

Preparing accounts, tax returns, payroll, VAT, and statutory filings under the terms of our engagement with you.

To meet legal obligations

Anti-money-laundering checks, HMRC reporting, and the record-keeping required by law and our professional body.

For our legitimate interests

Improving our services and preventing fraud — always weighed against your right to privacy before we proceed.

With your consent

Newsletters, event invitations, or marketing you've opted into. You can withdraw this whenever you like.

Who We Share It With

Limited, necessary sharing only

We don't sell personal data. We only share it where it's necessary to deliver our services or where the law requires it.

HMRC & Companies House

For statutory tax returns and company filings made on your behalf.

Pension Providers

To administer workplace pension auto-enrolment where we run your payroll.

Practice & Cloud Software Providers

Secure document storage and accounting software, each bound by a data processing agreement.

Professional Advisers & Regulators

Our insurers, auditors, or professional body, only where required for compliance or in the event of a claim.

A Future Buyer of the Business

Only in the event of a sale or restructure, and only under the same protections described in this notice.

International transfers: wherever possible your data stays in the UK. If a provider we use stores data abroad, we put safeguards such as the UK's International Data Transfer Agreement in place first.
Keeping It Safe

Protected at every layer

Encryption in transit and at rest

Data is encrypted as it moves between systems and while it's stored.

Access limited to people who need it

Only the team members working on your file can see your records.

Providers held to our standard

Every supplier we use is contractually bound to the same level of protection we apply ourselves.

A plan if something goes wrong

If we ever suspect a breach, we investigate, contain it, and notify you and the ICO without undue delay where the law requires it.

How Long We Keep It

Four stages, then it's gone

We don't keep data longer than we have a genuine reason to.

Collected

When you engage us, or simply get in touch, we begin holding what's needed for that purpose.

Actively Used

While you're a client, your file stays open and accessible to your engagement team only.

Retained

After our work together ends, financial and tax records are normally kept for a minimum of six years, in line with HMRC requirements.

Securely Deleted

Once no legal or business reason remains to keep it, your data is permanently and securely deleted.

Your Rights

You stay in control

UK GDPR gives you a set of rights over your own data. Here's what each one means in practice.

Exercise any of these

Email or call us and we'll act on it. We don't charge a fee unless a request is clearly unfounded or excessive, and we may ask you to verify your identity first.

Email info@aczone.co.uk
This notice is how we keep that promise — a clear explanation of what we collect and why, kept up to date.
Ask us for a copy of the personal data we hold about you, and confirmation of how we're using it.
Ask us to correct anything we hold about you that's inaccurate or incomplete.
Ask us to delete data we no longer have a good reason to hold, subject to our legal record-keeping duties.
Ask us to pause processing your data while we resolve a query about its accuracy or use.
Receive data you've given us, in a portable format, where our processing is based on consent and carried out automatically.
Object to processing based on our legitimate interests, or to direct marketing, at any time.
Withdraw consent for anything we process on that basis, at any time, without affecting anything already done.
Cookies

Cookies on this website

This website uses a small number of cookies to remember your preferences and understand how the site is used, so we can keep improving it.

You can control or delete cookies through your browser settings at any time — doing so won't stop you from using the rest of the site.

Changes

Changes to this notice

We'll update this page whenever our practices change, and the date below will reflect that.

For anything material, we'll also do our best to let existing clients know directly.

Last updated: 17 June 2026
Questions?

Talk to us about your data

Whether it's exercising a right, asking how something works, or raising a concern — we're glad to talk it through directly.

Not satisfied with our response?

You can complain to the Information Commissioner's Office (ICO), the UK's data protection regulator — Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or at ico.org.uk.

Scroll to Top