Privacy Policy
Effective Date: 20 August 2024
At A Counting Turtle, we are committed to protecting the privacy and security of your personal information. This Privacy Policy outlines how we collect, use, store, and disclose your data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Who We Are
A Counting turtle is a small accountancy practice based in Manchester. We provide accounting, bookkeeping, tax advisory, and related services to individuals and businesses. Our contact details are as follows:
2. What Data We Collect
We collect and process personal data necessary to provide our services. This may include, but is not limited to:
- Personal Identification Information: Name, address, phone number, email address, date of birth, national insurance number, tax identification number, etc.
- Financial Information: Bank account details, payment card information, income details, tax returns, payroll information, etc.
- Business Information: Company name, registration number, VAT number, financial statements, etc.
- Communications: Emails, phone call records, and other communication records.
3. How We Use Your Data
We use your personal data to:
- Provide accounting, bookkeeping, tax advisory, and related services.
- Fulfill our contractual obligations.
- Comply with legal obligations (e.g., tax laws, anti-money laundering regulations).
- Communicate with you regarding our services.
- Improve our services and business processes.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contractual Necessity: To perform our contract with you and provide the requested services.
- Legal Obligation: To comply with legal and regulatory requirements.
- Legitimate Interests: To manage and improve our business operations and services, provided that these interests do not override your fundamental rights and freedoms.
5. How We Store and Protect Your Data
We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, loss, or misuse. These measures include:
- Data Encryption: Encrypting sensitive data both in transit and at rest.
- Access Controls: Limiting access to your personal data to authorized personnel only.
- Data Retention: Retaining your data only for as long as necessary to fulfill the purposes for which it was collected or as required by law.
6. Who We Share Your Data With
We may share your personal data with:
- Third-Party Service Providers: Who assist us in providing our services (e.g., cloud storage providers, IT support, etc.). These providers are required to comply with GDPR and ensure the protection of your data.
- Legal and Regulatory Authorities: When required by law or to protect our legal rights.
- Professional Advisors: Such as auditors, lawyers, or other consultants, when necessary.
We do not sell or rent your personal data to third parties.
7. Your Rights Under GDPR
Under GDPR, you have the following rights regarding your personal data:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccurate or incomplete data.
- Right to Erasure: You can request that we delete your personal data, subject to certain legal obligations.
- Right to Restrict Processing: You can request that we restrict the processing of your data in certain circumstances.
- Right to Data Portability: You can request a copy of your data in a structured, commonly used, and machine-readable format.
- Right to Object: You can object to the processing of your data based on legitimate interests or direct marketing.
- Right to Withdraw Consent: If we process your data based on consent, you can withdraw your consent at any time.
To exercise any of these rights, please contact us using the contact details provided in Section 1.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on our website. We encourage you to review this policy periodically.
9. Contact Us
If you have any questions or concerns about this Privacy Policy or our data processing practices, please contact us at: