Privacy policy

  1. Purpose of this Notice

This privacy notice explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all other applicable UK data‑protection and privacy laws.

Please read this notice carefully to understand how we handle your personal information.

  1. About Us

Serco Chartered Accountants and Chartered Tax Advisers (“Serco”, “we”, “us”, “our”) is the data controller for the personal data we process.

Registered office:
23 Holland Avenue, Sutton, Surrey, SM2 6HW, United Kingdom.

We have appointed a Data Protection Manager who oversees our compliance with this notice. Contact details are provided in section 12.

  1. How We Collect Personal Data

We may collect personal data when:

    • you request a proposal or information about our services
    • you, your employer, or our clients engage us to provide services
    • you communicate with us by phone, email, post, or via our website
    • we receive information from third parties such as Companies House, HMRC, your employer, or publicly available sources
    • you attend our events or interact with our website (including cookies — see section 13 if you want this added)
  1. Types of Personal Data We Process

We may process the following categories of personal data:

    • identity and contact details (name, address, email, phone number)
    • details relating to services you have requested or received
    • records of communications and correspondence
    • information provided by third parties (e.g., employers, clients, HMRC, Companies House)
    • financial information where required for accountancy or tax services
    • any other information necessary for us to provide professional services

We do not intentionally collect special category data unless required for a specific service and only with appropriate safeguards.

  1. How We Use Your Personal Data

We process your personal data for the following lawful purposes:

a) Contractual necessity

To perform our contract with you, your employer, or our clients, including:

    • delivering accountancy, tax, and advisory services
    • managing billing, payments, and client relationships

b) Legal obligations

To comply with UK law, including:

    • anti‑money laundering (AML) checks
    • record‑keeping obligations
    • responding to lawful requests from regulators or authorities

c) Legitimate interests
Where our interests are not overridden by your rights, including:

    • managing and developing our business
    • improving our services
    • internal administration and reporting
    • limited direct marketing to existing clients (in line with PECR)

d) Consent
Where required (e.g., optional marketing communications).
You may withdraw consent at any time.

  1. How We Use Your Data in Practice

We may use your personal data to:

    • provide professional services to you or your employer
    • communicate with you about services, updates, or regulatory changes
    • administer our website and client portal
    • seek feedback on our services
    • notify you of changes to our terms or policies

We may anonymise data for statistical or analytical purposes.

  1. Data Sharing

We may share your personal data with:

Third‑party service providers, such as:

    • IT and cloud hosting providers
    • professional advisers
    • insurers
    • banks and payment processors
    • software providers used for accountancy and tax work

All third parties are required to maintain appropriate security and confidentiality.

Other disclosures

We may also share data:

    • with regulators (e.g., HMRC, ICAEW, ICO)
    • in connection with business restructuring or transfer
    • where required by law or to protect our legal rights

We do not sell your personal data.

  1. International Transfers

We may transfer your personal data outside the UK only where:

    • the destination country has an adequacy decision, or
    • we have implemented appropriate safeguards (e.g., ICO‑approved International Data Transfer Agreement), or
    • a specific exemption applies under UK GDPR.

We will inform you if such transfers occur.

  1. Data Security

We use appropriate technical and organisational measures to protect your personal data from:

    • loss
    • misuse
    • unauthorised access
    • alteration
    • disclosure

Access is restricted to individuals who need it for legitimate business purposes.

We maintain procedures for responding to data‑security incidents and will notify you and the ICO where legally required.

  1. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

    • statutory retention periods for financial and tax records
    • professional obligations under ICAEW and HMRC rules
    • limitation periods for legal claims

Retention periods vary depending on the type of data and service provided.

  1. Your Rights

Under UK GDPR, you have the right to:

    • access your personal data
    • request correction of inaccurate data
    • request erasure (in certain circumstances)
    • object to processing based on legitimate interests
    • restrict processing
    • request data portability
    • withdraw consent (where processing is based on consent)

To exercise any of these rights, contact us using the details in section 12.

We may need to verify your identity before responding.

  1. Contact Us

If you have questions about this notice or how we process your personal data, contact:

Data Protection Manager
Email: gr@serco-accountants.co.uk
Telephone: 020 8661 8922

You may also lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://ico.org.uk/make-a-complaint/data-protection-complaints/
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

  1. Changes to This Notice

We may update this privacy notice from time to time.
The latest version will always be available on our website.

Last updated: May 2026

ABOUT US ACCOUNTANCY SITE