Privacy policy
How we collect, use and protect your personal information.
On this page
The short version
- We use your information to provide accounting and tax services, to meet our legal duties and to run our firm.
- We never sell your information.
- We keep it only for as long as we need it, or the law requires.
- Where it goes outside the UK, it is protected by safeguards the UK recognises.
- You have rights over your information, and you can complain to us or to the Information Commissioner.
Who we are
Finsbury Accounting Limited ("we", "us") is the controller of the personal information described in this policy, which means we decide how it is used. We are a company registered in England and Wales, company number 12600764, with our registered office at 124 City Road, London EC1V 2NX.
We are registered with the Information Commissioner's Office (ICO), registration number ZA772068. Our privacy lead deals with questions about your information. Email info@finsburyaccounting.co.uk and mark it for their attention.
Who this policy covers
This policy covers people who visit our website, contact us or book a call, our clients, and the people connected to our clients whose details we receive while we work, such as directors, shareholders, employees, partners and family members. It also covers our suppliers.
If you give us information about someone else, please make sure they know about this policy. If you apply to work with us, we will give you a separate notice.
What we collect
- Contact and identity details: name, email address, phone number, home address and date of birth.
- Identity checks: copies of identity documents, proof of address, and the results of checks on sanctions lists and politically exposed persons.
- Tax and financial information: National Insurance number, tax references, income, bank statements, payroll records, platform and sponsorship earnings, contracts, and investments you ask us to report.
- Business information: company records, shareholdings, share options and investor details.
- Communications: emails, messages, call notes and booking details.
- Billing details: the bank details used for your Direct Debit.
- Website information: anonymous statistics about how the site is used.
Some work needs more sensitive information, such as health details for a tax relief claim. We collect this only when the work needs it, and protect it with extra care. Our identity checks can also reveal information about criminal offences, which we use only to meet our legal duties.
Where it comes from
Mostly from you or your business. We also receive information from HM Revenue and Customs (HMRC), Companies House, your previous accountant, your bank or payment platforms (with your permission), identity check providers and public records.
Do you have to give it to us?
Some information is required by law, such as the details we need for identity checks and for your tax returns. Other information we need in order to do the work you ask for. If you do not provide it, we may not be able to act for you, or to finish the work.
How we use it, and our legal basis
The law only allows us to use your information when we have a legal basis for doing so. Here is what we use it for, and the legal basis for each.
Where we rely on legitimate interests, we have weighed them against your interests and rights. Sensitive information is used only where the law allows, for example to make or defend legal claims, or where you have given explicit consent.
We only use your information for a new purpose if it fits with the original one, and we will tell you first. If we anonymise information so it can no longer identify you, we may use it for statistics. We do not make decisions about you using automated processes alone.
Identity checks and money laundering law
The Money Laundering Regulations require us to check the identity of our clients, and of the people who own or control them, before we act and from time to time after that. Information we collect for these checks is used only to prevent money laundering and terrorist financing, unless the law allows otherwise or you agree to another use.
If we have a legal duty to report a suspicion to the National Crime Agency, the law may prevent us from telling you.
Updates and marketing
We send occasional updates and guidance to clients about services similar to the ones they use, and to anyone who asks to receive them. Every email has a link to unsubscribe, or you can email us at any time. We never pass your details to other organisations for their marketing.
Information sent outside the UK
Some members of our team and some of our service providers are based outside the UK. When your information goes abroad, it is protected either because the UK recognises the destination country's data protection as adequate, or by contract terms the UK has approved, such as the International Data Transfer Agreement. Our team members outside the UK have signed data transfer agreements with us. You can ask us for details of these safeguards.
How long we keep it
We may keep information for longer if we need it for a legal claim or a regulator asks us to. After that, we delete or securely destroy it.
How we protect it
We use access controls, two-step sign-in, encrypted storage and secure file sharing. Only people who need your information for their work can see it, and everyone who works with us is bound by confidentiality.
We have a procedure for dealing with any suspected data breach, and we will tell you and the ICO where the law requires us to.
Your rights
You have the right to:
- ask for a copy of the information we hold about you
- have inaccurate or incomplete information corrected
- ask us to delete your information
- ask us to limit how we use your information
- receive information you gave us in a format you can reuse
- withdraw your consent at any time, where we rely on it
Your right to object
You can object at any time to us using your information for marketing, and we will stop. You can also object where we rely on legitimate interests; we will then stop unless we have strong legitimate grounds to continue, or need the information for a legal claim.
Some rights have limits, for example where the law requires us to keep records. To use any of them, email info@finsburyaccounting.co.uk. We may ask you to confirm your identity first, so we never give your information to the wrong person. There is usually no charge, unless a request is clearly unfounded or excessive. The law gives us one month to respond, which can be extended for complex requests; we will tell you if that happens.
Please also tell us if your details change, so the information we hold stays accurate.
Calls, messages and other platforms
When you book a call, the booking page is provided by Calendly, and video calls may use Zoom, Microsoft Teams or Google Meet. If you contact us through Instagram or LinkedIn, those companies also handle your information under their own privacy policies. If we record or transcribe a call, we will tell you at the start.
For your security, please send documents through the secure method we give you, rather than by messaging apps or social media.
Cookies and website statistics
Our website uses only the cookies it needs to work. Our visitor statistics do not use cookies and do not track you across other websites. Links to other websites, such as Calendly or our social media pages, are covered by those websites' own policies.
Children
Our website is not aimed at children. Where we act for someone under 18, such as a young athlete or creator, we work with their parent or guardian.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. Email info@finsburyaccounting.co.uk. We will acknowledge your complaint within 30 days, as the law requires, and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
We review this policy regularly and publish any changes on this page. This version was last updated in October 2026.