This Privacy Policy was last updated on 10 May 2026. It applies to all personal data processed by S.K.E. Accountancy Ltd.
← Back to Home
Legal & Compliance

Privacy Policy

We are committed to protecting your personal data. This policy explains what we collect, why we collect it, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

UK GDPR Compliant
Data Protection Act 2018
ICO Registered
AML Supervised by AAT

Data Controller

S.K.E. Accountancy Ltd is the data controller responsible for your personal information. We are registered in England and Wales and operate as an AAT-licensed accountancy practice regulated and supervised by HMRC for Anti-Money Laundering purposes.

1. About S.K.E. Accountancy Ltd

Company name: S.K.E. Accountancy Ltd

Registered in: England and Wales

Licence: AAT Licensed Practice

AML Supervision: Association of Accounting Technicians (AAT)

Contact email: hello@skeaccountancy.com

Contact telephone: +44 (0) 7348 951 783

Questions about your data? You may contact us at any time using the details above to exercise your rights, request a copy of your data, or raise a concern about how we handle your personal information.

2. Personal Data We Collect

We collect and process personal data in the course of providing accountancy, bookkeeping, payroll, tax, and related professional services. The categories of data we collect include:

Identity & Contact Data

  • Full name, title, and date of birth
  • Residential or business address
  • Email address and telephone number
  • National Insurance number and Unique Taxpayer Reference (UTR)
  • Companies House registration number (where applicable)

Financial Data

  • Bank account details and transaction records
  • Income, expense, and payroll information
  • VAT registration numbers and VAT return data
  • Tax return information submitted to HMRC
  • Invoices, receipts, and purchase records

Employment & Payroll Data

  • Employee names, addresses, and National Insurance numbers
  • Salary, benefits, and deduction information
  • P45, P60, and payslip data
  • Pension contribution and auto-enrolment data

Identity Verification Data (AML)

  • Copies of photographic identification (passport, driving licence)
  • Proof of address documentation
  • Beneficial ownership information for corporate clients

Website & Enquiry Data

  • Name and email address submitted via our contact form
  • The nature of your enquiry
  • Browser type, IP address, and pages visited (analytics only)

3. How We Use Your Personal Data

We only use your personal data where we have a lawful basis to do so under UK GDPR. The table below sets out our processing activities and the legal basis for each.

Purpose Legal Basis (UK GDPR)
Providing accountancy, bookkeeping, payroll, and tax services Performance of a contract (Article 6(1)(b))
Preparing and filing tax returns with HMRC Legal obligation (Article 6(1)(c))
Complying with Anti-Money Laundering regulations Legal obligation (Article 6(1)(c))
Client identity verification and onboarding (Know Your Client) Legal obligation (Article 6(1)(c))
Processing payroll and auto-enrolment pension submissions Performance of a contract / Legal obligation
Responding to website enquiries and booking consultations Legitimate interests (Article 6(1)(f))
Sending service updates, fee notices, and deadline reminders Performance of a contract / Legitimate interests
Marketing communications (where consent is given) Consent (Article 6(1)(a))
Maintaining accounting records and professional obligations Legal obligation / Legitimate interests

We will never use your personal data for purposes incompatible with those listed above without first informing you and, where required, obtaining your consent.

4. Data Retention

We retain personal data for no longer than is necessary for the purposes for which it was collected. Our standard retention periods are set by legal and professional obligations:

Category Retention Period Reason
Tax return and HMRC submission records 7 years from the relevant tax year HMRC statutory requirement
Payroll records 6 years from the relevant tax year HMRC and Employment law requirement
AML identity verification records 5 years from the end of the client relationship Money Laundering Regulations 2017
Bookkeeping and financial records 6 years (limited companies: 6 years from year-end) Companies Act 2006 / HMRC requirement
Client engagement letters and contracts 6 years from termination of engagement Limitation Act 1980
Website enquiry data (non-clients) 12 months from date of enquiry Legitimate interests

Once the applicable retention period expires, your personal data is securely deleted or anonymised.

5. Sharing Your Personal Data

We do not sell, rent, or trade your personal data. We share your data only where necessary and with appropriate safeguards in place:

Recipient Purpose / Basis for Sharing
HM Revenue & Customs (HMRC) Filing of tax returns, payroll submissions (RTI), and VAT returns on your behalf
Companies House Filing of statutory accounts and confirmation statements where instructed
The Pensions Regulator / Pension Providers Auto-enrolment and pension contribution submissions
Cloud accounting software providers (Xero, QuickBooks, Sage) Data hosted on your behalf in accordance with their respective privacy policies
Secure document sharing platforms (Dext, Hubdoc, or equivalent) Receipt capture and document exchange
Professional advisers Solicitors, financial advisers, or other regulated professionals acting on your behalf, where you have authorised this
Law enforcement or regulatory bodies Where we are legally required to disclose information (e.g., under AML reporting obligations to the National Crime Agency)

Important — AML Reporting: As an AAT-supervised practice under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, we have a legal obligation to report knowledge or suspicion of money laundering to the National Crime Agency (NCA). We cannot notify you if such a report is made, as doing so would constitute a criminal offence of "tipping off."

6. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our security measures include:

  • Encrypted storage and transmission of all client data
  • Password-protected systems with multi-factor authentication
  • Use of cloud accounting platforms that hold ISO 27001 or equivalent certification
  • Regular security reviews of all third-party software and integrations
  • Secure deletion of data upon expiry of retention periods
  • Restricted access to personal data on a need-to-know basis

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) within 72 hours and inform affected individuals without undue delay.

7. International Transfers

We process your personal data within the United Kingdom. Where any third-party software provider transfers data outside the UK (for example, to servers located in the EEA or the United States), we ensure that appropriate safeguards are in place, such as UK adequacy regulations or Standard Contractual Clauses, before any transfer takes place.

8. Cookies

Our website uses only essential cookies necessary for its operation. We do not use advertising cookies, tracking pixels, or third-party analytics platforms that profile individual visitors. The cookies we set include:

Cookie Type Purpose
Session cookies Temporary cookies that expire when you close your browser, used to support form submissions and navigation
Preference cookies Small files that remember your settings on return visits (e.g., if you have dismissed a notice)

You may configure your browser to refuse cookies. Doing so will not affect your ability to use the substantive content of this website.

9. Third-Party Websites

Our website may contain links to third-party websites, including our accounting software partners (Xero, QuickBooks, Sage) and professional bodies (AAT). We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policy of each website you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. The date at the top of this page and the effective bar above the hero section will reflect the date of the most recent update.

Where changes are material, we will notify existing clients by email. Continued use of our services after any update constitutes acceptance of the revised policy.

Your rights under UK GDPR

You have a number of rights in relation to your personal data. These rights apply in most circumstances, though some are subject to conditions or exceptions under applicable law.

Right of Access

You have the right to request a copy of the personal data we hold about you. We will respond within one calendar month. This is free of charge unless your request is manifestly unfounded or excessive.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it. We will action this without undue delay and within one month of your request.

Right to Erasure

You may request that we delete your personal data where there is no compelling reason for us to continue processing it. This right does not apply where we are required to retain data by law (e.g., for HMRC purposes).

Right to Restriction

You can ask us to suspend the processing of your personal data in certain circumstances — for example, if you contest its accuracy, while we verify the position.

Right to Data Portability

Where processing is based on your consent or the performance of a contract, and is carried out by automated means, you have the right to receive your data in a structured, commonly used, machine-readable format.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds which override your interests.

Right to Withdraw Consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

Right to Complain

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113 if you believe we have not handled your personal data in accordance with the law.

To exercise any of these rights, please contact us at data@skeaccountancy.com. We will respond within one calendar month. We may need to verify your identity before processing your request.

Questions about your data?

Contact us directly. We will respond to all data-related enquiries within one calendar month and take every request seriously.

Email Us Directly Back to Home