Privacy Notice

Who I am

I am Andrew Devitt, trading as APD Accountancy Services. I decide how and why your personal data is used. In data protection terms, I am the “controller”.

Contact me at info@apdaccounting.co.uk or on 07745 792 663.

What I collect

Enquiries: your name, email, phone number and message.
New client registration: name, address, phone, email, date of birth, business details, UTR, National Insurance number, the services you need and how you heard about me.
Identity checks: photo ID and proof of address. These are uploaded to a secure Box folder.
Client forms: the income, expense, asset and tax details I need to prepare your accounts and returns.
Website use: basic technical data, such as your IP address, collected by my web host and the services that load on the site.

Why I use it

To reply to your enquiry and set you up as a client. This is needed to take steps before a contract, and for my legitimate interest in running my practice.
To provide accountancy, bookkeeping and tax services to you. This is needed to carry out our contract.
To meet legal duties, including identity checks under anti-money laundering rules and filings with HMRC.
To keep records, keep my systems secure and deal with complaints or disputes. This is my legitimate interest.

Who I share it with

I do not sell your data and I do not use it for marketing by third parties. I share it only as needed with:

HMRC, when I file returns on your behalf with your authority.
EmailJS, which delivers website form submissions to my inbox.
Box, for secure file upload, storage and e-signing.
Microsoft 365 and my web host, which provide my email and website.
Elfsight, which displays Google reviews on the home page.
My professional bodies or anti-money laundering supervisor, if they inspect my records.

Some of these providers may handle data outside the UK. Where they do, I rely on the safeguards the law allows, such as approved contract terms.

How long I keep it

Identity and anti-money laundering records: for five years after our relationship ends, as the Money Laundering Regulations 2017 require. I then delete the personal data unless the law lets me keep it.
Accounting and tax records: for as long as I need them to do the work and meet legal and professional duties.
Enquiries that do not go ahead: only as long as needed to deal with your message.

Keeping it safe

I take reasonable steps to protect your data. Please upload ID and other documents using the Box link rather than ordinary email. Please note that details typed into the website forms, such as a National Insurance number or UTR, reach me as an email via EmailJS.

Cookies and the website

I do not use advertising or analytics cookies on this site. Some third-party services that load on it, such as the Google reviews box, fonts and icons, may set their own cookies or collect your IP address when they load.

Your rights

You can ask to see the data I hold about you, correct it, have it deleted, limit how I use it, object to my use of it, or receive a copy in a portable form. Some of these rights are limited where I must keep records by law. Contact me using the details above.

If you are unhappy with how I handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. I would appreciate the chance to put things right first.

Changes

If I change this notice, the updated version will appear on this page with a new date.