This notice applies to our website that we own and operate and all services we provide you with.
When we say ‘personal data’ we mean identifiable information about you, like your name, email, address, telephone number, bank account details, payment information, support queries and so on.
We may need to update this notice from time to time. Where a change is significant, we’ll make sure we let you know – usually by sending an email.
Who are ‘we’?
When we refer to ‘we’ (or ‘our’ or ‘us’), that means Rae Business Services (Yorkshire) Limited and all its directors and employees. Our registered office address is First Floor, 85 Great Portland Street, London, W1W 7LT. Our trading address is 8 Weavers Park, York, YO23 3XA.
To contact us, email us on email@example.com, or call us on 07587 709008.
Our principles of data protection
Transparency: We process your personal data by being open, honest and transparent.
Security: We securely treat your personal data entrusted to us.
Stewardship: We accept the responsibility that comes with processing personal data.
How we collect your data
When you use our services, we collect personal data. The ways we collect it can be broadly categorized into the following:
Information provided directly to us on engagement and through providing you with ongoing services: For example, when we prepare your self-assessment tax return, when you set up a company with us, when you apply for a job with us. Although you never have to provide us with personal information, if you did not it would usually prevent us from supplying the services you have engaged us to do.
Information we get from third parties: We do not engage in any formal referral relationships and therefore seldom receive personal information from third parties. When we do receive referrals from existing clients or professional contacts, we will always ensure that the referrer has obtain consent from the individual concerned to pass personal information onto us. We never make unsolicited calls, emails or use other forms of unsolicited marketing.
When we hold your personal data, we’ll only process it:
To perform a contract with you, or
- Where we have legitimate interests to process the personal data and they’re not overridden by your rights, or
- In accordance with a legal obligation, or
- Where we have your consent
How we use your data
First and foremost, we use your personal data to provide you with any services you’ve requested, and to manage our relationship with you. We also use your personal data for other purposes, which may include the following:
To communicate with you. This may include:
providing you with information you’ve requested from us or information we are required to send to you
- operational communication, like changes to our services, or changing deadlines for accounts submission deadlines etc.
- asking you for feedback
To support you. This may include assisting with the resolution of accounting / tax queries, updating you on accounting and tax legislative changes, sending you information on presentations and services that are of commercial benefit to you.
How we can share your data
There will be times when we need to share your personal data with third parties. We will only disclose your personal data to:
Directors and staff employed by us;
- HMRC, Companies House, other government agencies, courts or other third parties when it is necessary to provide the services contracted with you to perform, or when it is necessary to comply with applicable laws or regulations, or to exercise, establish or defend our legal rights. If we need to disclose information to third parties that is out of the ‘ordinary carrying out of our contractual duties’ we will notify you of this type of disclosure.
- Third party service providers who assist and enable us to use your personal data to provide contracted services – such as payroll (we use Kashflow payroll), company secretarial (we use Inform Direct) and anti-money laundering checks (we use Creditsafe).
- Other people ONLY when we have your direct consent to provide your personal information to them.
- International Data TransfersWhen we share data with other third-party providers, it may be processed in countries other than the country that you live in. Please note that we have checked that all our third-party providers are GDPR compliant – a list of our main third-party providers is shown below:Xero
HM Revenue Customs
Please note that we are committed to keeping your personal data safe, in particular:
- We store all your information using cloud systems which are themselves GDPR compliant (such as Kashflow, Xero and Dropbox)
- All our laptops that hold your personal information have secure passwords and cannot be accessed by other family members (as you know, all directors and staff work from home)
- All paper communications with your personal data is secured in locked cabinets or in a lockable room
- We use cross shredders to destroy all personal information securely
The length of time we keep your personal data depends on what it is and whether we have an ongoing business need to retain it (for example, to provide you with a service you’ve requested or comply with tax, legal or accounting requirements).
We’ll retain your personal data for as long as we have a relationship with you and for a period afterwards where we have an ongoing business need to retain it, in accordance with our data retention policies and practices. Following that period, we’ll make sure it’s deleted or anonymized.
It’s your personal data and you have certain rights in relation to it. You have rights to:
- Request a copy of your personal data, or ask us to restrict processing your personal data or delete it
- Object to our continued processing of your personal data
You can exercise these rights at any time by sending an email to firstname.lastname@example.org or calling us on 07587 709008.
Please use the same contact details if you have a complaint about how we are using you personal data. We will review and investigate your complaint and try to get back to you in a reasonable time frame. You can also complain to your local data protection authority. They will be able to advise you how to submit a complaint.
Last updated: 20 May 2018
Know what personal data we hold about you, and to make sure it’s correct and up to date