Privacy Policy

Estandz Place Consulting Ltd (“we”, “us”, “our”) is a UK registered accounting and tax advisory firm based in Sunderland, Tyne & Wear. We are the data controller for the personal information described in this policy, and we handle it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to visitors of our website, prospective clients, and clients we provide accounting, bookkeeping and tax services to.

Depending on how you interact with us, we may collect:

• Your name, email address, phone number and postal address
• Business details, such as company name, structure and registration numbers
• Financial information needed to provide bookkeeping, tax and advisory services
• Identification documents required for anti-money laundering (AML) checks
• Bank details, solely for the purposes of invoicing and billing
• Basic website usage information, such as pages visited and general analytics
• Details you provide through our Contact form or Client Onboarding Intake form, such as your business type, trading history, HMRC or Companies House registration status, current tax/compliance position, and the services you’re enquiring about

We use personal information to:

• Provide bookkeeping, tax, payroll and advisory services you’ve engaged us for
• Meet our obligations to HMRC and under anti-money laundering regulations
• Communicate with you about your account, enquiries or upcoming deadlines
• Prepare invoices and keep accurate business records
• Improve our website and understand how it’s used

Where our Contact form or Client Onboarding Intake form includes a separate, optional checkbox for marketing communications, we only send you service updates, newsletters or promotional offers if you’ve actively ticked that box. It’s never required in order to submit an enquiry or engage our services — it’s entirely your choice.

You can withdraw this consent at any time by contacting us using the details below, or via the unsubscribe link included in any marketing email you receive from us. Withdrawing marketing consent doesn’t affect our ability to contact you about services you’ve actually engaged us for.

We rely on a mix of lawful bases depending on the activity: performance of a contract when we’re providing services you’ve engaged us for, compliance with a legal obligation (for example, HMRC and AML record-keeping requirements), and legitimate interest where processing is reasonably necessary to run our business, such as responding to general enquiries.

We don’t sell personal data. We may share it with:

• HMRC and Companies House, where required to file returns or accounts on your behalf
• Accounting and bookkeeping software providers (such as Xero, QuickBooks or Sage) used to deliver our services
• Cloud storage and email providers that help us work securely and communicate with you
• Professional advisors (such as our own accountant or legal counsel), where necessary
• Regulators or authorities, where we’re legally required to disclose information

Any third party we share data with is required to keep it secure and use it only for the purpose we’ve shared it for.

Client financial records are retained for a minimum of six years, in line with HMRC record-keeping requirements. Where information is no longer needed for legal, tax or legitimate business reasons, we take steps to securely delete or anonymise it.

We store personal information on secure, reputable digital platforms and restrict access to authorised personnel only. Passwords, encryption and access controls are used to protect our systems, and we review our practices periodically to keep them up to date with good industry practice.

Under UK GDPR, you have the right to:

• Request access to the personal data we hold about you
• Ask us to correct inaccurate or incomplete information
• Ask us to delete your data, where we’re not required to keep it for legal reasons
• Restrict or object to certain kinds of processing
• Request a copy of your data in a portable format

To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data hasn’t been handled properly.

Our website may use cookies and similar technologies to help it run properly and to understand how visitors use it. Full details of what we use them for and how to manage them are set out in our Cookie Policy.

Our services are directed at adults and businesses, not children. We don’t knowingly collect personal data from children, and if we become aware that we have, we’ll take steps to delete it.

We may update this policy from time to time to reflect changes in our practices or the law. The “last updated” date at the top of this page shows when it was last revised, and we’d encourage you to check back periodically.

If you have questions about this policy or how we handle your data, email us at info@estandzplaceconsulting.co.uk or write to us at Estandz Place Consulting Ltd, Sunderland, Tyne & Wear, United Kingdom.