Gifted Accountants and Business Advisors
Effective from: 6 September 2026
Last reviewed: 6 September 2026
Gifted Accountants and Business Advisors ("Gifted Accountants", "we", "us" or "our") takes the privacy, confidentiality and security of personal information seriously.
This Privacy Notice explains how we collect, use, store, share and protect personal information when providing accountancy, tax, payroll, bookkeeping, business advisory and related professional services.
It applies to clients, prospective clients, employees of clients, directors, shareholders, beneficial owners, suppliers, contractors, business contacts, website visitors and other individuals whose information we may process.
This notice should be read alongside our Terms of Business, engagement letters and Cookie Policy, where applicable.
Gifted Accountants and Business Advisors currently operates as a sole-trader accountancy and business advisory practice.
We will normally act as the data controller where we decide how and why personal information is processed.
For some services, including certain payroll, bookkeeping or outsourced finance functions, we may act as a data processor on behalf of a client.
Website: giftedaccountants.com
Email: info@giftedaccountants.co.uk
Alternative email: hello@giftedaccountants.co.uk
Questions regarding data protection may be addressed to our Data Protection Lead.
Depending on the services we provide, we may process information including:
names, addresses, dates of birth and contact details;
National Insurance numbers, UTRs, VAT and PAYE references;
passports, driving licences and other identity documents;
bank details and financial transactions;
income, expenditure, assets, liabilities and investments;
accounting records, invoices, ledgers and financial statements;
tax returns, tax calculations and HMRC correspondence;
payroll, pension and employee information;
company ownership, directors and beneficial ownership information;
business plans, forecasts and management information;
emails, messages, telephone notes and professional correspondence;
website, portal, login and security information; and
information required for anti-money laundering, fraud prevention or regulatory purposes.
We seek to collect only information that is reasonably necessary for the services being provided or for our legal and professional obligations.
We may obtain information:
directly from you;
from your employer or another client;
through our website, portal or enquiry forms;
from previous accountants or professional advisers;
from HMRC and Companies House;
from banks, lenders, pension providers and insurers;
from identity verification and AML providers;
from public records and government databases; and
from other organisations where lawful and relevant to our work.
Where clients provide us with information about another person, they are responsible for ensuring they are entitled to provide that information where required by law.
We may use personal information to:
respond to enquiries and prepare proposals;
Depending on the services we provide, we may process information including:
names, addresses, dates of birth and contact details;
National Insurance numbers, UTRs, VAT and PAYE references;
passports, driving licences and other identity documents;
bank details and financial transactions;
income, expenditure, assets, liabilities and investments;
accounting records, invoices, ledgers and financial statements;
tax returns, tax calculations and HMRC correspondence;
payroll, pension and employee information;
company ownership, directors and beneficial ownership information;
business plans, forecasts and management information;
emails, messages, telephone notes and professional correspondence;
website, portal, login and security information; and
information required for anti-money laundering, fraud prevention or regulatory purposes.
We seek to collect only information that is reasonably necessary for the services being provided or for our legal and professional obligations.
We may obtain information:
directly from you;
from your employer or another client;
through our website, portal or enquiry forms;
from previous accountants or professional advisers;
from HMRC and Companies House;
from banks, lenders, pension providers and insurers;
from identity verification and AML providers;
from public records and government databases; and
from other organisations where lawful and relevant to our work.
Where clients provide us with information about another person, they are responsible for ensuring they are entitled to provide that information where required by law.
We may use personal information to:
respond to enquiries and prepare proposals;
carry out client onboarding;
verify identity and beneficial ownership;
perform AML and sanctions checks;
provide bookkeeping and accounting services;
prepare statutory and management accounts;
provide tax compliance and advisory services;
prepare and administer payroll;
provide business advisory and finance-function services;
communicate with clients and manage engagements;
submit information to HMRC and other authorities;
collect fees and manage overdue accounts;
prevent fraud and protect our systems;
comply with legal and regulatory obligations;
manage complaints, disputes and professional risk;
operate and improve our business; and
communicate relevant services and business information where permitted.
We process personal information only where we have an appropriate legal basis.
Depending on the circumstances, this may include:
Contract – where processing is necessary to provide agreed professional services or take steps before entering into an engagement.
Legal obligation – where processing is required for taxation, anti-money laundering, sanctions, accounting, payroll or other legal requirements.
Legitimate interests – where reasonably necessary to operate and protect our professional practice, prevent fraud, maintain security, recover fees, manage complaints or provide appropriate professional services.
Consent – where consent is the appropriate legal basis, including certain marketing activities.
Where special-category or criminal-offence information is processed, we will apply the additional conditions required by law.
As an accountancy service provider, we may be legally required to undertake customer due diligence and other financial-crime checks.
These may include:
identity and address verification;
beneficial ownership checks;
sanctions screening;
politically exposed person checks;
source-of-funds or source-of-wealth enquiries;
enhanced due diligence;
ongoing monitoring; and
investigation of unusual or suspicious activity.
We may be required to disclose information to authorities including HMRC, the National Crime Agency, law-enforcement agencies, regulators or courts.
The law may prevent us from informing you that certain disclosures have been made or explaining particular actions where doing so could amount to prohibited disclosure or 'tipping off'.
We may refuse, suspend or terminate services where required information is not provided or where we are legally unable to continue acting.
We do not sell personal information.
Where necessary and lawful, information may be shared with:
HMRC and Companies House;
the National Crime Agency and law-enforcement bodies;
courts, tribunals and regulators;
banks, lenders and payment providers;
pension providers and insurers;
solicitors, tax advisers and other professional specialists;
accounting, tax and payroll software providers;
client portal, cloud hosting and document-storage providers;
identity verification and AML providers;
cybersecurity and IT providers;
contractors and outsourced personnel; and
other organisations necessary to provide our services or meet legal obligations.
Access will be limited according to the nature of the service and legitimate business need.
We may use employees, contractors, subcontractors and specialist service providers to support our practice.
Some personnel or technology providers may operate outside the United Kingdom.
Where individuals outside the UK require access to client information, we seek to apply appropriate safeguards, which may include:
confidentiality agreements;
role-based and client-specific permissions;
restricted system access;
multi-factor authentication;
security requirements;
access logging and monitoring;
contractual data-protection provisions; and
restrictions on downloading or onward sharing.
Where UK data-protection law treats an arrangement as an international transfer, we will use an appropriate legal transfer mechanism or safeguard where required.
We take reasonable technical and organisational measures to protect personal information.
These may include:
secure cloud systems;
encryption;
role-based permissions;
multi-factor authentication;
password controls;
cybersecurity protection;
backups;
logging and monitoring;
confidentiality requirements; and
secure client portals.
Clients are encouraged to use our secure portal for particularly sensitive documents such as passports, bank information, tax records and payroll information.
We may communicate by email, telephone, video call or WhatsApp where appropriate.
Where calls or online meetings are recorded, participants will be informed before recording begins.
No electronic system can be guaranteed to be completely secure, but we take proportionate measures to protect information.
If we become aware of a personal-data breach, we will investigate and take appropriate steps to contain and address it.
Where required by law, we will notify the Information Commissioner's Office (ICO) and affected individuals within the applicable legal requirements.
We retain information only for as long as reasonably necessary having regard to:
tax and accounting requirements;
anti-money laundering legislation;
professional and regulatory obligations;
contractual requirements;
limitation periods;
potential legal claims;
insurance requirements; and
legitimate business needs.
Many client accounting and tax records may normally be retained for approximately six years, although particular records may need to be retained for shorter or longer periods.
AML records will be retained for the period required by applicable legislation.
Once information is no longer required, it may be securely deleted, destroyed, anonymised or otherwise removed from normal operational use.
Where permitted by law, we may send clients and business contacts information concerning:
accountancy and tax services;
tax deadlines and legislative developments;
business advisory services;
newsletters;
events;
financial insights; and
new services.
You may object to direct marketing at any time by using an unsubscribe option or contacting us.
Opting out of marketing does not prevent us from sending communications required to provide professional services to existing clients.
When you visit giftedaccountants.com, we or our service providers may process technical information such as:
IP address;
browser and device information;
pages visited;
timestamps; and
security information.
Our website may also use cookies and similar technologies.
Further information is provided in our separate Cookie Policy.
Depending on the circumstances and applicable law, you may have rights to:
request access to your personal information;
correct inaccurate or incomplete information;
request deletion of information;
restrict certain processing;
receive certain information in a portable format;
object to certain processing;
object to direct marketing; and
withdraw consent where processing relies upon consent.
These rights are not absolute.
We may sometimes be required or permitted to retain or withhold information because of taxation law, AML requirements, legal claims, regulatory requirements, another person's rights or other legal restrictions.
Requests may be sent to:
info@giftedaccountants.co.uk
or
hello@giftedaccountants.co.uk
We may request reasonable information to verify your identity before releasing personal information.
If you have concerns about how we process personal information, please contact:
Data Protection Lead
Gifted Accountants and Business Advisors
Website: giftedaccountants.com
Email: info@giftedaccountants.co.uk
Alternative email: hello@giftedaccountants.co.uk
We will investigate privacy complaints and respond in accordance with applicable legal requirements.
You also have the right to raise concerns with the Information Commissioner's Office (ICO).
We may update this Privacy Notice where our:
services;
business structure;
technology;
suppliers;
outsourcing arrangements;
legal obligations; or
data-processing activities
change.
If our practice is incorporated, sold, merged, reorganised or transferred, relevant personal information may form part of that transaction subject to appropriate confidentiality and data-protection safeguards.
The latest version of this Privacy Notice will be made available through our website.
Document: Privacy Notice and Data Protection Statement
Business: Gifted Accountants and Business Advisors
Business structure: Sole trader
Effective date: 6 September 2026
Status: Current
.png)
Helping individuals and growing businesses make confident financial decisions through practical accounting, tax and strategic business advice
