Privacy Policy

1. Who we are

The data controller is Sterling Crest Accountants Ltd, registered in England and Wales under company number 16941931.

Email: info@sterlingcrest.co.uk

Registered office: 530 Manor Mills, Ingram Street, Leeds, England, LS11 9BR

2. Information we collect

Depending on how you contact us or engage our services, we may collect:

• Identity and contact details (name, email, telephone)
• Business details and client type
• Enquiry information and correspondence
• Financial and accounting information required to deliver services
• Technical information such as IP address for security and form protection

3. How information is collected

We collect information when you:

• Submit the website enquiry form
• Email, call or message us
• Become a client and provide documents for an engagement
• Use the website (limited technical data for security and performance)

4. Why we process information

We process personal data to:

• Respond to enquiries and arrange consultations
• Provide accountancy, tax and related services
• Meet legal and regulatory obligations
• Manage our business relationship with you
• Protect the security of our systems and prevent abuse

5. Lawful bases

Depending on the activity, we rely on one or more of the following:

• Contract, where processing is necessary to provide agreed services
• Legal obligation, including tax, accounting and anti money laundering requirements where applicable
• Legitimate interests, such as responding to enquiries, improving service delivery and securing our website, balanced against your rights
• Consent, where required, for example optional analytics cookies

6. Who we may share information with

We do not sell personal data. We may share information with trusted parties where necessary, including:

• HMRC and Companies House where required for filings or legal duties
• Accountancy, payroll or cloud software providers used to deliver services
• Email and hosting providers that support our communications and website
• Professional advisers such as legal counsel where needed
• Regulators or law enforcement where legally required

Specific provider names will be confirmed in engagement documentation where relevant.

7. International transfers

Some service providers may process data outside the United Kingdom. Where this occurs, we take appropriate steps to ensure suitable safeguards are in place in line with UK data protection law.

8. Security

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, and we continually review our practices.

9. Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting or reporting requirements. Specific retention periods depend on the nature of the engagement and applicable UK legal obligations.

10. Your rights

Under UK data protection law, you may have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request erasure in certain circumstances
• Restrict or object to certain processing
• Request data portability where applicable
• Withdraw consent where processing is based on consent

Some rights may be limited where we must retain information for legal or professional reasons. Contact us to exercise your rights.

11. Complaints

If you are unhappy with how we handle your data, please contact us first so we can try to resolve the matter. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk.

12. Cookies and analytics

Essential cookies may be used for basic site operation and security. Non essential analytics cookies are only used if configured and consented to. See our Cookie Policy for details.

13. Policy updates

We may update this policy from time to time. The “Last updated” date below shows when it was last revised.