Tunstall Accounting Limited Privacy Policy
Introduction
Tunstall Accounting Limited takes the privacy and security of personal information seriously. This notice explains how I collect, use, store and share personal information when providing accountancy, tax and related services or when you contact or use the Tunstall Accounting website.
Who is responsible for your personal information?
Tunstall Accounting Limited is the data controller responsible for the personal information described in this notice.
Tunstall Accounting Limited
The Wesley Centre
Blyth Road
Maltby
Rotherham
South Yorkshire
S66 8JD
Telephone: 01709 432033
Email: chloe@tunstallaccounting.co.uk
Tunstall Accounting Limited is registered with the Information Commissioner's Office (ICO).
What personal information I collect
The information I collect will depend on the services I provide to you. It may include:
- your name, address, date of birth and contact details;
- National Insurance number, Unique Taxpayer Reference and other tax identifiers;
- identification documents and information required for anti-money laundering checks;
- employment, pension and benefits information;
- details of income, expenses, assets, liabilities and investments;
- bank account and financial information;
- payroll information relating to employees and workers;
- information about directors, shareholders, business partners and other individuals connected with a business;
- accounting records, invoices, receipts and bookkeeping information;
- correspondence, emails and information you provide through my secure client portal;
- information obtained from HMRC, Companies House and other public or official sources;
- information provided by previous accountants, advisers, employers, banks, pension providers and other third parties where relevant to the services I provide; and
- information submitted through the Tunstall Accounting website or contact forms.
In some circumstances, the information I receive may include special category personal data or information relating to criminal offences. I will only process this where it is relevant to the services I provide and where there is an appropriate legal basis for doing so.
How I obtain your information
I may obtain personal information:
- directly from you;
- from another person acting on your behalf;
- through the Tunstall Accounting website or contact forms;
- from HMRC, Companies House and other government bodies;
- from previous accountants or professional advisers;
- from employers, banks, pension providers and other organisations where relevant;
- from accounting, payroll and bookkeeping systems; and
- from publicly available sources where appropriate.
If you contact me through the website, your enquiry is sent to chloe@tunstallaccounting.co.uk. I may retain enquiries even where they do not result in you becoming a client, for record-keeping and follow-up purposes.
Why I use your personal information
I use personal information where necessary to:
- provide accountancy, bookkeeping, payroll, tax and related professional services;
- prepare and submit accounts, tax returns, VAT returns, payroll submissions and other filings;
- communicate with you about your affairs and the services I provide;
- manage my relationship with you;
- comply with anti-money laundering and client identification requirements;
- comply with professional, regulatory, legal and tax obligations;
- deal with HMRC, Companies House, pension providers and other organisations on your behalf where authorised;
- maintain accurate business and accounting records;
- establish, exercise or defend legal claims;
- protect the security and integrity of my systems and client information; and
- respond to enquiries from prospective clients.
I do not currently send generic marketing newsletters or promotional emails to clients or prospective clients.
Lawful bases for processing
Depending on the circumstances, I may process personal information on one or more of the following lawful bases:
Contract – where processing is necessary to provide services you have asked me to provide or to take steps before entering into an engagement with you.
Legal obligation – where I am required to process information to comply with tax, accounting, anti-money laundering, regulatory or other legal requirements.
Legitimate interests – where processing is necessary for the legitimate operation of Tunstall Accounting, such as managing client relationships, maintaining records, responding to enquiries, protecting systems and establishing or defending legal rights, provided those interests are not overridden by your rights and interests.
Consent – where consent is the appropriate lawful basis. Where processing relies on consent, you may withdraw that consent at any time.
Different lawful bases may apply to different types of processing.
Anti-money laundering checks
As a regulated accountancy practice, Tunstall Accounting is required to carry out client identification and anti-money laundering checks.
This may involve obtaining identification documents, checking information against electronic databases and using third-party identity verification or anti-money laundering service providers.
Information may also be disclosed where required by law to law enforcement agencies, regulators or other authorities. In some circumstances, the law may prevent me from telling you that such a disclosure has been made.
Software and service providers
I use established third-party software and cloud service providers to deliver and administer my services. These may include:
- Sage;
- Xero;
- FreeAgent;
- AutoEntry;
- Microsoft 365;
- IRIS; and
- IRIS OpenSpace.
Not every system is used for every client.
These providers may process personal information on my behalf in accordance with their contractual and data protection obligations.
Who I may share information with
Where necessary and appropriate, personal information may be shared with:
- HM Revenue & Customs;
- Companies House;
- pension providers;
- payroll providers;
- banks and financial institutions;
- other accountants and professional advisers, including when professional clearance is requested;
- mortgage advisers, financial advisers and insurance providers where you have asked or authorised me to communicate with them;
- software, cloud-storage, IT and secure-portal providers;
- identity verification and anti-money laundering service providers;
- professional bodies and regulators;
- legal advisers;
- law enforcement agencies, courts and other public authorities where required by law; and
- other third parties where you have authorised the disclosure or where there is another lawful basis for doing so.
I do not sell personal information to third parties.
How long I keep personal information
I keep personal information only for as long as it is reasonably required for the purpose for which it was collected and to meet legal, regulatory, professional and insurance requirements.
Accounting, tax and client records will generally be retained for at least six years after the relevant accounting or tax period or the end of the client relationship, as appropriate. Some records may need to be retained for longer where required by law, regulation, professional obligations or where they may be relevant to a legal claim.
Records obtained for anti-money laundering and customer due diligence purposes will normally be retained for the period required under applicable anti-money laundering legislation.
Enquiries from prospective clients that do not lead to an engagement will normally be retained only for as long as reasonably necessary for follow-up and record-keeping purposes.
When information is no longer required, I will take reasonable steps to delete or securely destroy it.
Keeping your information secure
I use appropriate technical and organisational measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.
These measures include the use of secure professional software and cloud services, controlled access to client information and the IRIS OpenSpace secure client portal for exchanging sensitive documents.
No method of electronic transmission or storage can be guaranteed to be completely secure, but reasonable precautions are taken to protect the information I hold.
International transfers
Some of the technology and cloud service providers I use may store or process information outside the United Kingdom.
Where personal information is transferred internationally, I take reasonable steps to ensure that an appropriate safeguard is in place, such as a UK adequacy regulation or an approved contractual mechanism, where required by UK data protection law.
Website enquiries and cookies
When you use the Tunstall Accounting website, certain technical information may be processed as necessary to operate and secure the website.
The website uses essential cookies and similar technologies where necessary for the website to function correctly. Tunstall Accounting does not currently use the website's optional analytics or tracking cookies.
Third-party services integrated into the website may use their own cookies where required for those services to operate.
Further information about cookies is provided through the website's cookie notification and settings.
Your data protection rights
Depending on the circumstances, you may have the right to:
- ask for access to personal information held about you;
- ask for inaccurate or incomplete information to be corrected;
- ask for personal information to be erased;
- ask for the use of your information to be restricted;
- object to certain uses of your personal information;
- receive certain personal information in a portable format;
- withdraw consent where processing is based on consent; and
- raise concerns about how your personal information is being used.
These rights are not absolute and may be limited where I have legal, regulatory or professional obligations to retain or process information.
To exercise any of these rights, contact:
chloe@tunstallaccounting.co.uk
I may need to verify your identity before responding to a request.
Complaints
If you have a concern about how Tunstall Accounting has handled your personal information, please contact me first and I will try to resolve the matter.
You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Further information is available from the Information Commissioner's Office at ico.org.uk.
Changes to this privacy notice
I may update this privacy notice from time to time to reflect changes in the law, regulatory requirements, technology or the way Tunstall Accounting operates.
The latest version will always be published on this website with the date it was last updated.
Last Modified 24th August 2026.
