Surfleet. ACCOUNTING
Book a call

Privacy Policy

Last updated: June 2026

Who we are

Surfleet Accounting Ltd (company number 16990878), registered at 4 Burton Drive, Beeston, Nottingham, NG9 5NS, is the data controller for personal information processed through this website and in the course of providing accountancy services.

We are registered with the Information Commissioner's Office (ICO). Our email is joel@surfleetaccounting.co.uk.

Information we collect

We collect personal information in the following ways:

  • Contact forms: name, email address, and message content when you contact us via the website.
  • Booking system: name, email, and any notes provided when you book a discovery call via Calendly.
  • Client onboarding: name, address, National Insurance number, UTR, company number, and financial information necessary to provide accountancy services.
  • Analytics: we use Plausible Analytics, which is privacy-friendly and does not use cookies or collect personal data. Page view and referral statistics are aggregated and anonymous.

How we use your information

  • To respond to enquiries and provide accountancy services
  • To fulfil our legal and regulatory obligations (including AML requirements)
  • To communicate with HMRC and Companies House on your behalf
  • To send service-related communications (deadline reminders, document requests)

We do not sell your data to third parties. We do not use your data for marketing unless you have explicitly requested communications from us.

Legal basis for processing

  • Contract: processing necessary to fulfil our engagement agreement with you
  • Legal obligation: processing required by HMRC, anti-money laundering legislation, and other regulatory requirements
  • Legitimate interests: responding to enquiries and operating the website

Data retention

We retain client records for a minimum of 6 years from the end of the relevant tax year, in accordance with HMRC requirements and our professional obligations. Anti-money laundering records are retained for 5 years after the end of a client relationship.

Your rights

Under UK GDPR, you have the right to: access your personal data, rectify inaccurate data, erasure (in certain circumstances), restriction of processing, data portability, and to object to processing based on legitimate interests.

To exercise any of these rights, contact us at joel@surfleetaccounting.co.uk. We will respond within one month.

Data security

We use industry-standard security measures to protect your data, including encrypted transmission (HTTPS) and secure cloud-based document storage. We regularly review our security practices.

Third parties

We may share data with HMRC, Companies House, and other regulatory bodies as required by law. We use cloud-based accounting software (FreeAgent/QuickBooks/Xero) to process client financial data - these services have their own privacy policies and are subject to appropriate data processing agreements.

Cookies

This website uses no tracking cookies. Our analytics tool (Plausible) does not set cookies or track individuals across sites.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Material changes will be communicated to active clients.

Complaints

If you have concerns about how we process your data, please contact us in the first instance. You also have the right to complain to the Information Commissioner's Office: ico.org.uk.