Privacy policy

Who we are

C Drew Bookkeeping Solutions (“we”, “us”) is a trading name of Connor Drew. We are the controller of the personal information described in this policy, which means we decide how and why it is used.

• Email: enquiries@cdrewbookkeeping.co.uk
• Phone: 07507 925499
• Address: Penstraze Business Centre, Truro, Cornwall TR4 8PN
• ICO registration number: [ICO REGISTRATION NUMBER]

What information we collect

When you get in touch

If you use the contact form, email or phone us, we collect your name, business name, email address, phone number, what you need help with, and anything you choose to tell us in your message.

When you become a client

To provide our services we collect:

• your contact details and those of anyone you authorise to deal with us
• proof of identity and address, which anti-money-laundering law requires us to check
• your National Insurance number and Unique Taxpayer Reference, where we need them to submit Making Tax Digital updates for you
• your business’s financial records — bank transactions, invoices, receipts and ledgers — which may include personal information about your customers and suppliers
• access to your accounting software, where you give it to us

We don’t ask for special category information such as health details. Please don’t include it in messages to us.

When you visit the website

Our hosting provider records technical information such as your IP address, browser type and the pages you request, so the site can run securely. We don’t use analytics or advertising cookies unless you agree to them — see our cookie policy.

The website loads its fonts from Google Fonts, so your browser sends your IP address to Google when you visit. Google Fonts does not set cookies. See Google’s privacy policy.

How we use it, and our lawful basis

UK data protection law requires us to have a lawful basis for each way we use your information:

We never sell your information, and we won’t send you marketing without your permission.

Who we share it with

We only share your information where we need to, and only as much as is needed:

• Service providers who handle data for us under contract: website hosting ([HOSTING PROVIDER]), contact form delivery (Web3Forms), email ([EMAIL PROVIDER]), and your accounting software (Xero or Intuit QuickBooks).
• HMRC, when we submit VAT returns or Making Tax Digital updates for you.
• Your accountant, when you ask us to hand records over.
• Regulators and authorities — our professional body and anti-money-laundering supervisor (AAT), our insurers and professional advisers, or law enforcement — only where the law requires it.

Transfers outside the UK

Some of our providers, such as Xero, Intuit and Google, may store or process information outside the UK. Where they do, the transfer is protected by UK adequacy regulations or by appropriate safeguards such as the UK International Data Transfer Agreement.

How long we keep it

• Enquiries that don’t lead to work: deleted within 12 months.
• Client records and the financial records we prepare: six years after our working relationship ends, in line with HMRC record-keeping rules.
• Identity and anti-money-laundering records: five years after our working relationship ends, as the Money Laundering Regulations 2017 require.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the information we hold about you
• have inaccurate information corrected
• have your information deleted, where we have no legal reason to keep it
• restrict or object to how we use it, including where we rely on legitimate interests
• receive information you gave us in a portable format
• withdraw consent at any time, where we rely on consent

To use any of these rights, email enquiries@cdrewbookkeeping.co.uk. There’s normally no charge, and we’ll respond within one month. We don’t make any decisions about you by automated means.

Complaints

If you’re unhappy with how we’ve handled your information, please tell us first and we’ll try to put it right. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.

Changes to this policy

We’ll update this page if the way we use information changes. The date at the top shows when it was last revised.