Privacy Policy
Last updated: January 19, 2025
Introduction
affravangh ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website affravangh.com or use our services.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website or services, you consent to the data practices described in this policy.
Information We Collect
Information You Provide to Us
We collect information you provide directly to us, such as when you:
- Fill out a contact form or request a consultation
- Subscribe to our newsletter
- Engage our accounting or tax consulting services
- Communicate with us via email, phone, or other means
- Provide feedback or participate in surveys
This information may include:
- Name and contact details (email address, phone number, postal address)
- Business information (company name, industry, size, financial data)
- Personal financial information (when providing accounting services)
- Tax identification numbers and related documentation
- Bank account details (for service delivery purposes)
- Any other information you choose to provide
Information We Collect Automatically
When you visit our website, we automatically collect certain information about your device and usage, including:
- IP address and location data
- Browser type and version
- Operating system
- Referral URLs and pages visited
- Time and date of visits
- Device identifiers and connection information
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our use of cookies, please see our Cookie Policy.
How We Use Your Information
We use the information we collect for various purposes, including:
Service Delivery
- Providing accounting, tax consulting, and related services
- Processing transactions and managing client accounts
- Preparing tax returns and financial statements
- Communicating with you about our services
Website and Communication
- Responding to your inquiries and requests
- Sending newsletters and marketing communications (with consent)
- Improving our website and user experience
- Providing customer support
Legal and Compliance
- Complying with legal obligations and regulatory requirements
- Maintaining professional standards and ethical obligations
- Detecting, preventing, and addressing fraud or security issues
- Enforcing our terms of service and protecting our rights
Legal Basis for Processing
Under UK GDPR, we process your personal data based on the following legal grounds:
Contract Performance
Processing necessary for performing our contract with you or taking steps prior to entering into a contract (e.g., providing accounting services).
Legal Obligation
Processing necessary for compliance with legal obligations, including:
- Anti-money laundering regulations
- Tax reporting requirements
- Professional body obligations
- Record retention requirements
Legitimate Interest
Processing necessary for our legitimate business interests, such as:
- Marketing our services to existing clients
- Improving our website and services
- Fraud prevention and security
- Administrative purposes
Consent
Where we have obtained your explicit consent, such as for marketing communications to non-clients or certain cookie usage.
How We Share Your Information
We do not sell, trade, or otherwise transfer your personal information to third parties except as described below:
Service Providers
We may share information with trusted third parties who assist us in operating our business, including:
- Cloud storage and computing providers
- Email service providers
- IT support and security services
- Professional advisors (lawyers, auditors, insurance providers)
Professional Requirements
We may disclose information as required by our professional obligations:
- To HMRC or other tax authorities as legally required
- To regulatory bodies (ICAEW, FRC, etc.) when necessary
- In response to legal proceedings or regulatory investigations
Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
International Transfers
Your personal data may be transferred to and processed in countries outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place, including:
- Adequacy decisions by the UK government
- Standard contractual clauses
- Binding corporate rules
- Certification schemes and codes of conduct
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:
- Encryption of sensitive data in transit and at rest
- Secure access controls and authentication
- Regular security assessments and updates
- Staff training on data protection
- Incident response procedures
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including:
Client Records
- Tax records: Minimum 6 years (as required by HMRC)
- Accounting records: Minimum 6 years
- Client correspondence: Up to 7 years after service termination
Website Data
- Contact form submissions: 2 years unless converted to client
- Newsletter subscriptions: Until you unsubscribe
- Website analytics: Up to 26 months
Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right of Access
You can request copies of your personal data and information about how we process it.
Right of Rectification
You can request correction of inaccurate or incomplete personal data.
Right of Erasure
You can request deletion of your personal data in certain circumstances (subject to our professional retention obligations).
Right to Restrict Processing
You can request limitation of how we process your data in certain circumstances.
Right to Data Portability
You can request transfer of your data to another organization in certain circumstances.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making
You have rights regarding automated decision-making and profiling (though we don't typically engage in such activities).
How to Exercise Your Rights
To exercise any of your rights or if you have questions about our data processing, please contact us at:
- Email: [email protected]
- Phone: +44 20 7946 0958
- Post: affravangh, 125 Deansgate, Manchester M3 2BY, United Kingdom
We will respond to your request within one month of receiving it. In complex cases, we may extend this by up to two months.
Complaints
If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Children's Privacy
Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete such information.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:
- Posting the updated policy on our website
- Updating the "Last updated" date
- Sending email notifications for significant changes (where we have your email address)
Contact Information
If you have any questions about this Privacy Policy or our data practices, please contact us at:
affravangh
125 Deansgate
Manchester M3 2BY
United Kingdom
Email: [email protected]
Phone: +44 20 7946 0958
For general inquiries, you can also contact us at [email protected].